· 5 min read
Every Dependency Is a Supplier You Never Vetted
Most of your software is open-source code nobody vetted. Attackers know it. How to treat dependencies like the suppliers they are, without slowing teams down.
Blog
1 article on open source.