- What: AI coding tools can introduce unvetted open source dependencies
- Impact: Organizations need to govern packages before they enter the development pipeline
AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages at the point of selection, before they enter the development pipeline. [...]