Open-source risk is often simplistically reduced to security headlines about the latest vulnerability or bug count. Security matters, of course, but it is only one dimension of a broader risk surface ...
Open source software is a vital part of modern computing; it’s involved in much of the software we use every day. But is it too good to be true, and is it really free, in either sense of the word?