Open-Source Security: How Digital Infrastructure Is Built on a House of Cards

Proprietary software has responded to threats by implementing thorough institutional security measures. The same care is not being given to open-source software—primarily due to misaligned incentives.