If anything, the recent software supply chain attacks demonstrate the interconnectivity of modern software and the exponential risk one successful exploit poses to thousands of organizations worldwide. Contrast Security's annual 2021 Application Security Observability Report finds that custom code comprises a substantial percentage of active application code. A large percentage of open-source libraries are inactive, and moreover a majority of classes in active libraries are never invoked. Contrast's CTO and Co-founder Jeff Williams and CISO David Lindner discuss these and other application composition findings and insights in this Inside AppSec podcast.
2021 Application Security Observability Report:
https://www.contrastsecurity.com/2021-observability-report