‘Set it and forget it’ attitude to open-source software has become a major security problem, says Veracode • The Register

https://www.theregister.com/2021/06/22/third_party_libraries_veracode/