Sonatype’s Brian Fox and the Perplexing Phenomenon of Downloading Known Vulnerabilities

od What's in the SOSS? An OpenSSF Podcast