Compliance in the 2016 Future of Open Source
1 like305 views
Black Duck Software provides solutions for automating the security and management of open source software to mitigate vulnerabilities and compliance risks. A survey in 2016 revealed that many organizations lack formal policies for evaluating open source code, with significant challenges in compliance and enforcement. Numerous industry collaborators, including major tech companies and organizations, support the advancement of open source practices.
1 of 1
Download to read offline
More Related Content
What's hot (20)
Ad
Viewers also liked (20)
Ad
Similar to Compliance in the 2016 Future of Open Source (20)
More from Black Duck by Synopsys (20)
Compliance in the 2016 Future of Open Source
- 1. Organizations worldwide use Black Duck Software’s industry-leading products to automate the processes of securing and managing open source software, eliminating the pain related to security vulnerabilities, open source license compliance and operational risk. Black Duck is headquartered in Burlington, MA, and has offices in San Jose, CA, London, Frankfurt, Hong Kong, Tokyo, Seoul and Beijing. For more information, visit www.blackducksoftware.com Future of Open Source Survey 2016 COMPLIANCE SPOTLIGHT said there is no formal policy for selecting & approving open source code of respondents who have policies don’t enforce them or allow them to be bypassed have no list of approved open source licenses never evaluate their code quality 30%of respondents aren’t very successful at complying with associated licenses OVER NEARLY NEARLY NEARLY 50% 50% are not successfully providing information about licenses, security issues & software versions NEARLY 60% 60% 90% Compliance is Erratic Code Reviews Are Rare Existing Policies Rarely Enforced Future of Open Source 2016 collaborators: Abilian, Acquia, Ant Systems, Appnovation, Appsembler, Ardent Technologies, Inc., Bareos GmbH & Co. KG, Black Duck Software, Capital One, Chamilo, Chef, CloudFoundry Corp, Confer, Coolan, Couchbase, Credativ, DEIS/Engineyard, Eclipse Foundation, EnterpriseDB, Evolveum, Grid Protection Alliance, Hewlett Packard, InfoSys, JFrog, Linux Foundation, Linux Professional Institute, MARSEC, Microsoft, MassTLC, Miracl, nexB, NGINX, North Bridge, Open Source Business (OSB) Alliance, Open Source EHR Alliance, Open Source Initiative (OSI), OpenClinic, Open-Xchange, Opmantek, OpusVL, Pentaho, Ravel Law, Red Hat, Rift-io, SDH Institute, Tecnisys, The Apache Software Foundation, The Document Foundation, Ubuntu, Univention, VoltDB, Wikibon, WIPRO and WP Engine. *platinum collaborators are in bold Growing Opportunity for Policies & Procedures