DEV Community

Discussion on: Is open-sourcing server-side code a security threat?

Collapse
 
094459 profile image
Ricardo Sueiras

Does anyone actually have data points they can bring to this discussion? The only reports I have seen are old, and we have seen a big increase in volume and activity in open source, yet I have still to see an updated report.

I have seen the WhiteSource/Snyk/Blackduck reports, but they only look introspectively at open source and do not provide any real analysis against non open source. Anyway point to some interesting posts?