share by default: implicit re-use of open source components 90% use + 10% on top = 100% solution: self-made, proprietary or open source Average1 BOM ratio of open-source / non-open-source components within software solutions. Sources: 2020, SONATYPE "State of the Software Supply Chain Report": Chapter 5 - The Trust and Integrity of Software Supply Chains, figure 5C - page 33f safe money: devide by N