Black Duck：2025年度开源安全和风险分析报告（英文版）

Open source software (OSS) has revolutionized application development, providing a vast repository of prebuilt components that offer numerous benefits such as cost savings, flexibility, and scalability. However, with all those benefits comes risks that every organization using open source needs to be prepared to acknowledge and address. The 2025 “Open Source Security and Risk Analysis” (OSSRA) report details key findings from Black Duck® audit data, including security vulnerabilities, licensi