Supply Chain Security in Open Source AI: Auditing XAI Tool Dependencies

Key Points

• This research investigates the security vulnerabilities within the supply chain of open source AI by examining tool dependencies.
• Audited various open source AI tools for their dependencies
• Evaluated security measures and vulnerabilities
• Used statistical analysis to assess the risk levels of dependencies
• Identified multiple high-risk dependencies in XAI tools
• Demonstrated significant security gaps affecting supply chain integrity
• Reported a correlation between dependency management and overall tool security