3
According to the most recent Open Source Security and Risk Analysis Report (OSSRA), 97% of all scanned codebases contain open source components, with an average of more than 900 such components per application. Moreover, nearly two-thirds of these components are transitive dependencies. That means they’re libraries that are pulled in indirectly — and many teams may not even realize they’re using them.
This widespread reliance on open source, with each open source component following its own support policy and timeline, exposes…
