> OSS IQ Journal
Research & Analysis
on Open-Source
Dependency Health
In-depth reports on software supply chain risk, dependency drift, maintenance signals, and the hidden costs of modern development.
> Research Report · June 2026
The Poisoned Well
How open source packages became a primary malware delivery channel — and AI-assisted coding is making it bigger, faster, and stranger.
> Analytics · April 2026
The Hidden Cost of AI‑Generated Code
Why Faster Code Writing Is Making Software Worse?
All Research
Research Report
The Poisoned Well
Open source packages have become a primary delivery channel for malware — and AI-assisted coding is making it bigger, faster, and stranger. The attacks, the defenses, and what actually works.
Research Report
The Hidden Cost of AI-Generated Code
AI tools accelerate output but introduce hidden costs in code quality, security, and long-term maintenance — and the data is starting to confirm it.