Thorough discussion of open source risks and free tools to identify them

Good coverage of open source risks and the free OSS Index tool to identify vulnerabilities in your code’s dependencies.