Security risk is increasing across the software delivery lifecycle as development relies more heavily on third-party components