Trusting public repos implicitly. A key insight from our 3SC survey report for you.

ActiveState's software supply chain security survey report is ready. Here's the key insight for you.

View in browser  Hi John,   Our software supply chain survey uncovered a key finding we thought you'd find highly relevant:  >30% of respondents continue to implicitly trust open source repositories. Even though open source organizations are making great strides to improve the security of their public repositories, the reality is that they are still the wild west where anything goes. Implicitly trusting open source components from public repositories exposes organizations to security risks, including typosquatting, dependency confusion, and prebuilt binaries that may contain malware.   How can organizations trust but verify the open source they import? Get the complete report to find out.   The ActiveState Platform imports only source code from public repositories and automatically builds indemnified packages that are vetted for maintainability, security, and commercial use. It might be the turnkey software security solution you need in 2022. Let us show you how.   Until next time!   Dana Crane Product Team ActiveState ActiveState Software, 1000 - 1177 West Hastings Street, Vancouver, BC V6E 2K3 Unsubscribe Manage preferences