Fact sheet released by CISA provides software security challenges and recommendations to improve security and risk management of OSS use.
https://www.securitymagazine.com/articles/100018-cisa-publishes-fact-sheet-for-organizations-using-open-source-software