Chart of the Week

How much “Shadow Code” is in your open-source applications?

Unknown Authors Contributed to Open-Source Components in Your Software!

Data-centric Network Access Backdoors are embedded in Open-Source Software!

XZ is a wakeup call – 5.3% of Open–Source components are pre-tampered!

Open-source software: Ten times the innovation, ten times the risk!

Where do your “critical” open-source dependencies come from?

Open-source software ages badly!

Poisoned Software Supply Chains

A third of your Open-Source Software are not fully attestable and that should worry you – a lot!

Are your Open-Source dependencies POISONED?

Open Source Software Charts: OSS risk is determined more by the quality of its dependencies than by the quality of its developers!

82% of Open-Source components are inherently risky

A Positive Revelation with Open Source Software!

90% of software components in Open-Source are transitive, invisible dependencies

Every Open-Source dependency is a software supply chain by itself!

Unearthing the Hidden Risks: Critical Inherent Risk Scores in Open-Source Components

Packages are reused 2.7 times on average within the same Open-Source Project

Vulnerabilities by Dependency Level in Open-Source Projects

Fixed vs Unfixed Vulnerabilities Distribution in Open-Source Software

What’s in your open-source software?