Developers Gorge on Open Source Amid Worries About Quality, Security

In-brief: Sonatype's report finds explosive growth in open-source component use but persistent security problems across the software supply chain — approximately one in 16 components contains a known vulnerability, many projects never repair dependencies, and incidents like “npm-gate” expose the fragility of relying on public package registries; the report urges organizations to adopt SBOM-like inventories, local repositories, and stricter procurement hygiene.