A presentation I did in Swedish on security issues that comes with building modern webapplications using third-party components. I used examples from my bug bounty history and the consensus was to give these components as much focus as the rest of the application during a security audit, especially the individual implementation of the components.