Even with all eyes on software supply chain security, open source remains a neglected target
The 2020 SolarWinds hack served as an alarming wake-up call about the threat of the software supply chain, spurring rapid shifts in how organizations secure third-party applications. And yet, two years later, open source repositories remain ripe for exploitation.
Source: scmagazine.com