2023-10-15 Sunday - Sonatype’s 9th Annual State of the Software Supply Chain

 

[image credit: Sonatype, 9th Annual State of the Software Supply Chain, p-4, with my highlights added]

Noteworthy:
Why the practice of actively managing your Software Bill of Materials (SBOM) is important...

Sonatype’s 9th Annual State of the Software Supply Chain
https://www.sonatype.com/hubfs/9th-Annual-SSSC-Report.pdf

Notable citations:

• "The rate of download growth in open source consumption has slowed the past two years. In 2023, this trend continued with the average download growth rate sitting at 33%, which is exactly what it was last year. This is a stark comparison to the all-time high of 2021, which saw 73% year-over-year growth"
• "Between 2022 and 2023, the number of available open source projects grew an average of 29%"
  
•  "Maven and npm, are each estimated to reach over a trillion requests in 2023"
• "[Maven and npm] represent 90% of the request served"

 

[image credit: Sonatype, 9th Annual State of the Software Supply Chain, p-9]