{"id":10146,"date":"2020-07-24T06:53:00","date_gmt":"2020-07-24T14:53:00","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=10146"},"modified":"2020-05-19T07:32:21","modified_gmt":"2020-05-19T15:32:21","slug":"open-source-outdated-components-threaten-security","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/open-source-outdated-components-threaten-security\/","title":{"rendered":"Open Source: Outdated Components Threaten Security"},"content":{"rendered":"\n

Open Source software has become ubiquitous. A study by Synopsys<\/a> found that 99 percent of the 1250 commercial products investigated contained at least one open source component. In fact, the average application has 445 open-source components.<\/p>\n\n\n\n

But the Synopsys report also found that 91 percent of those open source components were out of date by more than four years, and many of the open source projects were abandoned with more than two years of no activity. That could lead to security and stability problems.<\/p>\n\n\n\n

Tim Mackey<\/a>, principal security strategist of the Synopsys Cybersecurity Research Center, said that <\/a>“it\u2019s difficult to dismiss the vital role that open source plays in modern software development and deployment, but it\u2019s easy to overlook how it impacts your application risk posture from a security and license compliance perspective.”<\/p>\n\n\n\n

Mackey said that<\/a> “the problem is that there is often a disconnect. The developers are making decisions of what to bring in, and somewhere, someone may have wrote down a policy for what open-source components can be used, but it is so cumbersome and it is a speed bump to innovation – that people are working around it.”<\/p>\n\n\n\n

As Frank Nagle<\/a>, professor at Harvard Business School, said that<\/a> “understanding which components are most widely used and most vulnerable will allow us to help ensure the continued health of the ecosystem and the digital economy.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Open Source software has become ubiquitous. A study by Synopsys found that 99 percent of the 1250 commercial products investigated contained at least one open source component. In fact, the average application has 445 open-source components. But the Synopsys report…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[78,24,88],"tags":[],"class_list":["post-10146","post","type-post","status-publish","format-standard","hentry","category-code-development","category-open-source","category-software-development"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=10146"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10146\/revisions"}],"predecessor-version":[{"id":10147,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10146\/revisions\/10147"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=10146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=10146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=10146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}