The 2017 State of Open Source Security from Snyk
snyk.io