g. Which "Top N" vulnerability/attack lists do your development practices actively attempt to address
(e.g. CWE Top 25, OWASP Top Ten, custom Top-N list)?
2. Third-Party Software Management
a. Which third-party libraries are used by the software?