In an extensive study involving responses from 1,200 professionals in Security, Development, and Operations, coupled with analysis by the JFrog Security Research team and data from Artifactory, we delved into the current state of software supply chain security. Here are some key findings:

• The open-source software supply chain has significantly increased, with hundreds of thousands of new packages introduced in 2023.
• The proliferation of security tools reduces developer efficiency, with up to 25% of developers' time devoted to security remediation.
• Organizations prefer using AI in security roles over trusting it to generate code.