Top 10 Open Source Software Risks

Endor Labs has issued a report outlining the top 10 open source software risks of 2023. 

The report, developed in collaboration with HashiCorp, Adobe, Palo Alto Networks, and others, “outlines risks introduced through the dependency on open source components throughout the software development process,” the announcement states.

Specifically, the top risks named in the report are:

1. OSS-RISK-1 — Known Vulnerabilities
2. OSS-RISK-2 — Compromise of Legitimate Package
3. OSS-RISK-3 — Name Confusion Attacks
4. OSS-RISK-4 — Unmaintained Software
5. OSS-RISK-5 — Outdated Software
6. OSS-RISK-6 — Untracked Dependencies
7. OSS-RISK-7 — License Risk
8. OSS-RISK-8 — Immature Software
9. OSS-RISK-9 — Unapproved Changes (mutable)
10. OSS-RISK-10 — Under/Oversized Dependency

See the full report for risk details.