Open-source libraries help software developers meet aggressive deadlines. As a result, these libraries and their classes continue to proliferate and grow in complexity—increasing the risk they pose while making it more difficult to secure modern applications.
The 2021 State of Open-source Security Report uses telemetry from actual applications protected by Contrast OSS and Contrast Assess to reveal key trends about library usage, vulnerabilities, and best practices. Key findings include:
- While the average application contains 118 libraries, only 38% of libraries are active.
- The average library uses a version that is 2.5 years old—which increases the risk of unaddressed vulnerabilities.
- The average Java application has 50 open-source library vulnerabilities.
- High-risk licenses are present in 69% of Java applications and 33% of Node applications—exposing organizations to significant legal consequences.
