The State of Open Source report by Snyk reveals signs of slowing supply chain security momentum and plateaued DevOps maturity.Dependency tracking and code ship frequency have shown little change since last year.There is a decline in organizations implementing new tooling for supply chain vulnerabilities and investing in training on supply chain security.Many organizations are displaying signs of 'AppSec exhaustion', with reduced engagement in security practices.