We don't have a reliable way to verify that open-source software hasn't been secretly tampered with.
open
Global / Unspecified, Global
Widely used open-source code is maintained by volunteers, and a single compromised update can silently spread through millions of systems before anyone notices. Verifying the integrity of this software supply chain remains unresolved.
Citation ID: WS00658
Title: We don't have a reliable way to verify that open-source software hasn't been secretly tampered with.
URL: https://worldsolve.org/index.php?api=problem&id=658