We discuss the challenges managing risk in 3rd party code from things like Open Source Software libraries.