June 1, 2022

Oh Open Source Supply Chain Security, Where Art Thou?

“This is horrifying. But also not surprising.” These are the words of a friend of mine, a security specialist, when I told him what I found out today. But first… What is Open Source Supply Chain? Most applications nowadays use open source libraries, especially for common functionality like e.g. sending web requests, so it is not necessary to re-invent the wheel all the time. This is great! This saves a lot of work, time and money, and usually when a library is widely used, it is rock stable....