Annual research

Software Supply Chain Security — State of the Nation 2026

A source-backed view of the people, control points, and vulnerabilities shaping the open-source software supply chain.

Report cover preview. The complete report is available after sign-in.

Report access

Report registration is currently unavailable. The public research remains available below.

Read the public synopsis and source notes. Full report files are available to signed-in users.

Edition 2026

Evidence-backed findings on the open-source software supply chain in 2026.

Measured 2026-06-25 · Published 2026-08-24

Based on the Exodos Labs provenance dataset.

Start with six open findings, then sign in free to access the complete report and Research Studio.