Security risks associated with the CPEC supply chain