Risk-based approach to UFLPA compliance essential as third-party pass throughs spike