Modern applications rely heavily on open-source software, with 98% of audited codebases containing open-source components according to the Black Duck 2026 Open Source Security and Risk Analysis (OSSRA) report. While this accelerates development and helps teams deliver features faster, it also introduces security risks when vulnerabilities exist within those external components.

In this video, we explore what OSS vulnerabilities are and why they are so common in modern software development. We also look at the challenges of managing security across large dependency trees, fast-moving updates, and the indirect trust introduced through transitive dependencies.

For more tutorials, product updates, and ProGet tips, be sure to subscribe to the Inedo YouTube channel for the latest videos from Inedo.