In this year’s survey, we learned how current events like the SolarWinds and Log4Shell software supply chain exploits and new government initiatives like the White House executive order on improving the nation’s cybersecurity are changing the way organizations manage open source.

We explored the most urgent challenges development teams face when building applications with open source. We collected data regarding how confident technologists are in their organizations’ current open source management practices, and in the open source components and languages they use more generally. Finally, we dove deep into several open source management best practices, including the use of software bills of materials (SBOMs) and repositories of approved open source components.