The top 1,000 open-source libraries

▤ Summary

The first, 2020s "Vulnerabilities in the Core, a preliminary report and Census II of open-source software, focused on the lower level critical operating system libraries and utilities. This new report aggregates data from over half a million observations of free and open-source (FOSS) libraries used in production applications at thousands of companies. Kevin Wang, FOSSAs Founder and CEO observed, The ubiquitous nature of OSS means that severe vulnerabilities — such as Log4Shell — can have a devastating and widespread impact. Mounting a comprehensive defense against supply chain threats starts with establishing strong visibility into software." Besides simply listing them, the surveys authors, from Harvard University, made five overall findings: 1) Theres a need for a standardized naming schema for software components.

▦ Linked Companies

Synopsys, Inc.

$1B+

Protecode

$1M to $5M

Snyk

$250M to $500M

Npmjs

$1M to $5M

FOSSA Inc.

$10M to $25M