BlackDuck-Open-Source-Risk-Analysis-Report-2026.md

The 2026 Open Source Security and Risk Analysis (OSSRA) report from Black Duck analyzes nearly 3,000 projects across 947 codebases and documents dramatic growth in open source usage and risk: mean vulnerabilities per codebase more than doubled (to 581), 65% of organizations reported a supply chain attack in 2025, license conflicts surged to historic highs (68% of codebases), and widespread maintenance debt and AI-assisted development have accelerated the attack surface; the report concludes with governance, SBOM, and tool-integration recommendations to manage these systemic risks.