Security Risks Persist in Open Source Ecosystem

The CENSUS III report, drawing on 12 million observations across more than 10,000 companies, assesses systemic security risks in open source software, including persistent reliance on unsupported Python 2, inconsistent component naming that impedes SBOM and supply chain security, concentration of maintenance among a small set of contributors and individual accounts vulnerable to takeover, and widespread legacy software; it also notes a significant rise in Rust adoption as the ecosystem shifts toward memory-safe languages.