On the security risk analysis method of open source software supply chain

This paper presents a comprehensive assessment method of the security of open source components. The process is constructed using three analytical techniques: hierarchical analysis, expert scoring, and linear weighting. These techniques are employed to identify the parameters that affect the security of open source software. The parameters are then used to evaluate the security of open source components. The evaluation results can inform decisions on the introduction of open source components.