Josh and Kurt talk about Sonatype's 9th Annual State of the Software Supply Chain. There's a ton of data in the report, but the thing we want to talk about is the statistic that only 11% of open source is actually being maintained. Do we think that's true? Does it really matter?

Show Notes * Sonatype report * ecosyste.ms * GNOME libcue flaw * Reality 2.0 supply chain episode