Ricky is concerned that developers in his organization make use of third$-$party code in their applications, which may introduce unknown vulnerabilities. He is concerned about the risk of the organization running code that it is not aware it is using. Which one of the following activities would best address this risk?

Package monitoring

Dynamic analysis

Static analysis

Web application firewalls