JFrog
b599b2f1-64ec-43f0-80ad-337ebf5af3c1

Software Supply Chain State of the Union 2025

Released: Nov 18, 2025 |
Length: 46 pages |
Language: English |
Resource: Whitepaper

We combined responses from 1,400 Security and DevOps professionals, analysis from the JFrog Security Research team, and JFrog Platform data to understand the state of software supply chains today.

Here’s a preview of the findings:

  • Open-source risk is exploding with MILLIONS of new packages
  • CVE data issues obfuscate vulnerability severity and applicability
  • Organizations continue to increase the number of security tools used
  • Complete visibility of software provenance eludes many organizations
  • The AI software supply chain is booming, but so is the risk

By registering, you are agreeing to the terms and conditions, including the use of your information, as outlined in our privacy policy, and you may withdraw your consent or unsubscribe at any time.