Shadow code may pose a serious supply chain risk. Sampling 4,300 websites and applications ranked by traffic, researchers discovered that each website had an average of 12 third-party scripts and three fourth-party scripts.
Report shows that shadow code from third-party libraries is a risk for web applications and concern for owners afraid of brand damage, lawsuits, and regulatory actions.


