An overview of the basics - what are direct and transitive dependencies, the top open source risks, and a review of what an end-to-end code security pipeline looks like.