Chart of the Week

Open-Source Ages Like Milk, Not Wine.

In the world of open source, time doesn't always make things better. It makes them riskier.

June 30, 2026

The Trojan Horse in Your Dependency Chain

June 23, 2026

Open Source Origins: Mapping the Modern Software Supply Chain

June 16, 2026

Suspicious & Silent AI Attackers

June 11 2026

The Hidden Risks Inside AI Skill Marketplaces

June 3 2026

Silent AI attackers, are they already in your environment?

May 19, 2026

JAN 2025: VOLUME 1

Do you know the provenance of your open-source software?

JAN 2025: VOLUME 1

DEC 2024: VOLUME 1

How much “Shadow Code” is in your open-source applications?

DEC 2024: VOLUME 1

MAY 2024: VOLUME 1

Unknown Authors Contributed to Open-Source Components in Your Software!

MAY 2024: VOLUME 1

APR 2024: VOLUME 2

Data-centric Network Access Backdoors are embedded in Open-Source Software!

APR 2024: VOLUME 2

APR 2024: VOLUME 1

XZ is a wakeup call – 5.3% of Open–Source components are pre-tampered!

APR 2024: VOLUME 1

MAR 2024: VOLUME 3

Open-source software: Ten times the innovation, ten times the risk!

MAR 2024: VOLUME 3

MAR 2024: VOLUME 2

Where do your “critical” open-source dependencies come from?

MAR 2024: VOLUME 2

MAR 2024: VOLUME 1

Open-source software ages badly!

MAR 2024: VOLUME 1

FEB 2024: VOLUME 3

Poisoned Software Supply Chains

FEB 2024: VOLUME 3

FEB 2024: VOLUME 2

A third of your Open-Source Software are not fully attestable and that should worry you – a lot!

FEB 2024: VOLUME 2

FEB 2024: VOLUME 1

Are your Open-Source dependencies POISONED?

FEB 2024: VOLUME 1

JAN 2024: VOLUME 2

Open Source Software Charts: OSS risk is determined more by the quality of its dependencies than by the quality of its developers!

JAN 2024: VOLUME 2

JAN 2024: VOLUME 1

82% of Open-Source components are inherently risky

JAN 2024: VOLUME 1

DEC 2023: VOLUME 1

A Positive Revelation with Open Source Software!

DEC 2023: VOLUME 1

NOV 2023: VOLUME 2

90% of software components in Open-Source are transitive, invisible dependencies

NOV 2023: VOLUME 2

NOV 2023: VOLUME 1

Every Open-Source dependency is a software supply chain by itself!

NOV 2023: VOLUME 1

OCT 2023: VOLUME 4

Unearthing the Hidden Risks: Critical Inherent Risk Scores in Open-Source Components

OCT 2023: VOLUME 4

OCT 2023: VOLUME 3

Packages are reused 2.7 times on average within the same Open-Source Project

OCT 2023: VOLUME 3

OCT 2023: VOLUME 1

Vulnerabilities by Dependency Level in Open-Source Projects

OCT 2023: VOLUME 1

OCT 2023: VOLUME 2

Fixed vs Unfixed Vulnerabilities Distribution in Open-Source Software

OCT 2023: VOLUME 2

SEPT 2023: VOLUME 1

What’s in your open-source software?

SEPT 2023: VOLUME 1