The Code the World Depends On: A First Look at Technology Makers' Open Source Software Dependencies

Cadence Patrick, Kimberly Ruth, Zakir Durumeric

Open-source software (OSS) supply chain security has become a topic of concern for organizations. Patching an OSS vulnerability can require updating other dependent software produc…