Sonatype’s report highlights a 650 percent year-on-year increase in supply chain attacks aimed at upstream public repositories. In 2021, developers are expected to download more than 2.2 trillion open source packages from the top four ecosystems. The most popular open-source projects are also the most vulnerable.
Sort: