Rami Sass and the trouble with borrowed code

An acquisition audit helped send Rami Sass into open source security. After building WhiteSource into Mend.io, he is applying the same uncomfortable question to AI: what, exactly, have we let into our software?