Learn About the Leader in Software Composition Analysis – Black Duck Software

A comprehensive evaluation of “the six (SCA) providers that matter most and how they stack up,” the The Forrester Wave™: Software Composition Analysis, Q1 2017 assesses the current state of the software composition analysis market and provides in-depth analysis of the six providers.

Two surprising statistics are noted in the Forrester Wave report:

  • “Developers use open source components as their foundation, creating applications using only 10% to 20% new code” 
  • “Unfortunately, many of these (open source) components come with liabilities in their license agreements, and one out of every 16 open source download requests is for a component with a known vulnerability.” 
see-for-yourself.png

Black Duck. Know your code.