Leading organisations keep open-source critical debt under 15 percent, while 100 percent of critical debt is open source in lagging organisations