The Black Duck Audit Services team at Synopsys conducts open source audits on thousands of codebases for its customers every year. Those audits are driven primarily by merger and acquisition transactions and eventually become the primary source of anonymized data for our annual Open Source Security and Risk Analysis (OSSRA) report.

Read full article on Dzone