1 article on this topic.
A $400m-backed non-profit has published a v0.1 index of 421 open source AI products across the model, product, and infrastructure layers — useful groundwork for anyone trying to reason about AI supply-chain risk, but not a security assessment in itself.