Chris Eng is vice president of research at CA Veracode, where he leads the team responsible for integrating security expertise into the company’s core product offerings. Eng talks about the tradeoff between security and speed in software development. Eng: The need for a “trust but verify” mindset when using third-party code is necessary to keep open source libraries of open source components. He also discusses the need to maintain a security-driven approach to the development of software software and the need for verification.”]
Source: https://www.databreachtoday.com/managing-open-source-risks-a-11523