Which testing technique is best for finding vulnerabilities in third-party open-source dependencies?

Pick an option to reveal the answer.