The 2021 Open Source Security and Risk Analysis (OSSRA) report, produced by the Synopsys Cybersecurity Research Centre (CyRC), examines the results of more than 1,500 audits of commercial codebases, performed by the Black Duck® Audit Services team.

Download the full report here: https://www.synopsys.com/software-integrity/resources/analyst-reports/open-source-security-risk-analysis.html#