Software Engineering Daily · Tuesday, August 4, 2026
Matt Moore emphasized the pervasive nature of open-source software in modern applications, calling it a 'superpower' for developers. However, he also highlighted that this reliance creates an expanding attack surface, with malicious actors exploiting trust in public registries, package managers, and CI/CD pipelines.
“Open source software underpins virtually every modern application. That ubiquity is a superpower for developers, but it is also an expanding attack surface.”
“Software supply chain attacks were once rare, but are now happening daily with malicious actors exploiting the trust developers place in public registries, package managers, and CI/CD pipelines.”
“So open source just permeates everything that we do, and it's basically unavoidable these days if you want to write a modern application.”