2026 State of the Software Supply Chain with Brian Fox

Josh chats with Brian Fox from Sonatype about their 2026 State of the Software Supply Chain report. Most of the number continue to grow at alarming rates, but there's some new interesting findings in this one. We discuss end of life and open source which is tough to define. We touch on what using AI with open source dependencies looks like (and why it's broken), and we discuss the challenge of upgrading your open source dependencies in a way that doesn't break everything. It's a great report and great discussion. The show notes and blog post for this episode can be found at

You can listen to 2026 State of the Software Supply Chain with Brian Fox online on Radio and Podcast. Open the player on this page to stream the available audio.

2026 State of the Software Supply Chain with Brian Fox is an episode from Open Source Security Podcast by Open Source Security Podcast.

This episode is 35:48 long.

This episode was published on Mar 23, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Open Source Security Podcast when more episodes are available from the podcast feed.