In a recent study, the US Department of Homeland Security noted that 90% of security breaches happen because of vulnerabilities in the code. On average a codebase in enterprises consists third-party components and containing open source components and 44% of those applications as critical vulnerabilities.
These statistics are showing how important from developers to CISOs to plan and asses the source code to avoid data breaches.