When one open-source package riddled with vulns pulls in dozens of others, what's a dev to do? https://www.theregister.com/2020/06/26/open_source_security_snyk_survey/ via @theregister