OWASP Software Supply Chain Security Project, OWASP Foundation, 2024 (OWASP Foundation) - A comprehensive resource for understanding and mitigating risks throughout the software supply chain, including third-party dependencies.
Security audits, Python Packaging Authority (PyPA), 2024 - A guide for understanding security audit tools and practices within the Python packaging ecosystem.