Ten years of OSSRA: what a decade of data tells us about the state of open source security

https://www.techradar.com/pro/ten-years-of-ossra-what-a-decade-of-data-tells-us-about-the-state-of-open-source-security