A city analytics team wants to embed an open-source charting library in an internal dashboard. What assessment is required?
Select an answer to reveal the explanation.
Short Explanation
Open source can be fantastic for city dashboards—until a nasty CVE or a license surprise shows up. Check vulnerabilities and license fit before you glue it in. Free as in puppy still needs care and feeding.
Full Explanation
Open-source components require assessment of known vulnerabilities, maintenance posture, and license obligations that may affect redistribution or disclosure. Municipal use of OSS does not remove supply-chain or legal risk. Security assessment of open-source software is a defined Domain 8 acquisition concern.