Challenges of Tracking and Documenting Open Source Dependencies in Products: A Case Study.

Software vendors need to manage the dependencies of the open source components used in their products. Without this management, license compliance would be impossible, export restrictions could not be maintained, and security vulnerabilities would remain unknown to the vendor.