Many companies do not appreciate the fact that
open source software is third party code, and unknowingly permit software developers and outsourcing companies to introduce
open source — wiped clean of its
licenses and notices, in some cases — without any internal review, resulting in a significant portion of code base unmaintained
against security vulnerabilities.