Enterprise dependency hygiene: 7 facts from ~400K scanned artifacts

Anonymized scan observations: criticals grow with age, transitive and base-image share, SNAPSHOT storage sink, VEX signal-to-noise, and behavior change after gray “refuse download on fail”—with method limits and executable actions.