And why, all too soon, most open-source projects must manage their own Common Vulnerabilities and Exposures.
The New Stack | Steven J. Vaughan-Nichols