Over two-fifths (41%) of organizations do not have confidence in their open source security, with only 49% claiming to even have a policy, according to new research from the Linux Foundation.

Co-sponsored by Snyk, the State of Open Source Security report was compiled from interviews with 550 open source stakeholders and Snyk’s technology, which scanned more than 1.3 billion open source projects.

The use of open source repositories to accelerate time-to-market is widespread in the developer community, but can expose organizations to covert risks if these components contain malware or vulnerabilities.

Read full article on Infosecurity