Open source components are an essential part of today's software applications, but they can come at a critical cost: security. Modern software applications comprise components from many different ...

The Equifax data breach of 2017 provided a wake-up call for businesses that handle sensitive data. The company attributed the breach to unpatched open source software -- and it wasn't alone. In 2018, ...

The Linux Foundation and Harvard's Lab for Innovation Science this week released the rankings of the top 500 open source projects in two major ecosystems in the first step toward cataloging the ...

Open-source code in commercial network software can mean that when flaws are found by open-source project teams, fixes don’t make it to the commercial products. The continuous influx of open-source ...

The recently released 2020 Open Source Security and Risk Analysis (OSSRA) report, produced by the Synopsys Cybersecurity Research Center (CyRC), found that of more than 1,250 codebases analyzed in ...

With catalogs, part of the Tidelift Subscription, companies get a comprehensive approach to curating, tracking, and managing their open-source components. This works whether you're using other group's ...

99% of commercial codebases contain at least one open source component, with open source comprising 70% of the code overall, according to Synopsys. More notable is the continued widespread use of ...

The proportion of open source codebases with vulnerabilities has continued to remain level over the past two years, but the number of applications with high-risk vulnerabilities has dropped to its ...

ActiveState today announced a reselling partnership with Docker, Inc., the trusted platform for building software in the agentic era. The partnership pairs Docker Hardened Images (DHI), the hardened ...

When a company says its product is built on open source, you might want to read the fine print ...

The geographic distribution of open-source contributions introduces geopolitical risks that organizations must urgently consider, especially with rising nation-state attacks, according to Lineaje.

Defining an open-source verification methodology is a lot more difficult than just developing an open-source simulator. This is the reality facing open-source hardware such as RISC-V. Some people may ...