The number of reported open source security vulnerabilities continues to rise, and it is no longer practical to address all open source vulnerabilities and stay on schedule.
