Tracking and limiting concentration risk across supply chain to avoid over reliance on any party