Open and Closed Software Security Redux

Twenty years ago, we surveyed the landscape of software security for open source systems. While some things remain the same, other things have changed, in both predictable and surprising ways.