Learn About the Leader in Software Composition Analysis – Black Duck Software
A comprehensive evaluation of “the six (SCA) providers that matter most and how they stack up,” the The Forrester Wave™: Software Composition Analysis, Q1 2017 assesses the current state of the software composition analysis market and provides in-depth analysis of the six providers.
Two surprising statistics are noted in the Forrester Wave report:
- “Developers use open source components as their foundation, creating applications using only 10% to 20% new code” ¹
- “Unfortunately, many of these (open source) components come with liabilities in their license agreements, and one out of every 16 open source download requests is for a component with a known vulnerability.” ²
Black Duck. Know your code.
¹ 2015 State of the Software Supply Chain Report: Hidden Speed Bumps on the Road to ‘Continuous,'" Sonatype (http://cdn2.hubspot.net/hubfs/1958393/White_Papers/2015_State_of_the_Software_Supply_Chain_Report-.pdf?t=1466775053631)
² 2016 State of the Software Supply Chain," Sonatype (https://www.sonatype.com/software-supply-chain).