9th Annual State of the Software Supply Chain Report

Sonatype’s industry-defining research on the rapidly changing landscape of open source, software development, and software supply chain security. The State of the Software Supply Chain report each year isn't just a cautionary tale, but a call to action. It is a response to the pressing need to redefine our priorities and a testament to our willingness to evolve. We find ourselves in a period of revolution. Modernization is our ally. With regulations becoming a focus in nearly every region, an uncertain economic climate demanding cost savings and efficiencies, and malicious activity more prominent than ever, it’s time for change.

In the following pages, we provide you with an in-depth update on open source usage trends and security practices. Sonatype continues to draw from public and proprietary data sources to illustrate a host of issues with effective supply chain management.