SEI Cyber Minute: Securing Open Source Components

Nearly 2 billion vulnerable components are downloaded annually, and the average application has over 20 open-source vulnerabilities. Mark Sherman recommends the SPDO approach to secure open-source components to diminish the risk and the impact.