Open Source and Software Supplier Risk Review
Check libraries and tools for upkeep and licence issues.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it (what [VERIFY] means).
Review software suppliers. List of key libraries and tools with version, last release date, maintainers and licence: [SOFTWARE_LIST]. Flag items with no recent releases, a single maintainer, known security notices, unclear licences or end-of-life versions. Suggest replacements or monitoring. Return a table and a policy for adding dependencies. Licence interpretation needs professional review [VERIFY]. Add a worked sample list: Library X, last release 4 years ago, one maintainer, no security notices, permissive licence; medium risk, monitor or replace. Library Y, end-of-life version, known security notices; high risk, upgrade now. Tool Z, licence unclear; ask a lawyer [VERIFY]. Add a policy: new dependencies need a reason, a licence check, and a review of maintenance activity. Add a worked scoring: each library receives 0 to 2 for maintenance activity, security record, licence clarity, community size and replaceability, total out of 10. Library X scores 3, Library Y scores 6. Set an action level, for example below 5 requires a plan. Add a record of reviews with the date and reviewer.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.