2020 Open Source Security and Risk Analysis (OSSRA) Report is a resource you need to identify and manage open source in your code. Based on the anonymized data from more than 1,250 audited code bases, the report provides insights and eye-opening statistics about open source security, license compliance, and code quality risk in commercial software. Open source is a great foundation for modern software development, but when not managed properly, open source can expose you to numerous risks including licensing, security, and software quality risk.”]
Source: https://www.bankinfosecurity.com/whitepapers/2020-open-source-security-risk-analysis-report-w-6652