The Burden of Knowledge: Dealing With Open Source Risks

At FOSS Backstage 2025 in Berlin, I explored a critical challenge facing OSPOs and development teams: as we increase analysis of our software supply chains, tools and scorecards reveal potential risks in Open Source projects like low maintenance, lack of community, or poor security practices. But this data alone doesn&rsquo;t help if it merely points out potential problems without offering…