2012 sonatype-survey-findings-pdf-1
Upcoming SlideShare
Loading in...5
×
 

Like this? Share it with your network

Share

2012 sonatype-survey-findings-pdf-1

on

  • 930 views

Findings from Sonatype's 2012 annual open source software development survey. More than 2,500 responses from around the world.

Findings from Sonatype's 2012 annual open source software development survey. More than 2,500 responses from around the world.

Statistics

Views

Total Views
930
Views on SlideShare
930
Embed Views
0

Actions

Likes
0
Downloads
2
Comments
0

0 Embeds 0

No embeds

Accessibility

Categories

Upload Details

Uploaded via as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

2012 sonatype-survey-findings-pdf-1 Presentation Transcript

  • 1. Transforming Software Development
  • 2. Transforming Software Development
  • 3. Transforming Software Development
  • 4. Who Did We Talk To?Role Within the Organization 52% Software Developer/Engineer 22% Architect 13% Team Lead/Project Manager 5% Build Manager 6% Manager, Director, or Executive 3% IT Operations 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 5. A variety of organizations were representedOrganizations Surveyed 17% Financial Services 33% Tech & ISV 12% Consulting 6% Telecommunications 2% Manufactoring 5% Media & Entertainment 7% Goverment & Military 18% Other 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 6. Organizations large and small participatedNumber of Developers in the Organization 24% 501+ 19% 101-500 23% 26-100 34% 1-25 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 7. OS development infrastructure is quickly becoming the standardDoes your organization use open sourcedevelopment infrastructure?We’re standardizing on an open source development infrastructure stack 49% 2011 52% 2012We only use open source infrastructure if it’s commercially supported 7% 2011 10% 2012It’s not our corporate standard, but tons of people use it 27% 2011 27% 2012A few of our developers use it, but it’s not widely adopted 17% 2011 11% 2012 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 8. Most of you use a repository manager, here’s why Why do you use a repository manager? 35% To enforce standards for 64% Improve component build time usage 67%To managecomponent 32% usage Better visibility into component usage 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 9. Visibility and control is even more important for large organizations Why do you use a repository manager? Organizations with over 500 developers 41% To enforce standards for component usage 64% Improve build time 75%To managecomponent usage 34% Better visibility into component usage 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 10. 2/3 of organization contribute to open source projectsOpen Source in Organizations 9% 34% We strictly consume open source 12% 34% 45% We use open source and contribute directly back to projects 12% We use open source and contribute back via a third party 45% 9% We contribute to open source projects even though our company’s policies prohibit it 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 11. Transforming Software Development
  • 12. You told us that Java OS components are the most important to youHow important are the following types of opensource components to your organization?Percentage reporting critical, pretty important, or medium, but getting more important 15% 14% 86% 2. .NET 3. C / C++ 4% 4% 1. Java 4. Python 5. Perl 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 13. Web searches are the most common way of finding componentsHow do you find artifacts for your projects?Search the web for artifacts that meet our needs 70%Rely on the advice of my colleagues 42%Use master repository search tools (eg. Central Repository Search) 35%Must adhere to corporate standards 35% 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 14. The Central Repository is the most popular source of componentsWhat sources of open source components aremost important to your development efforts?Percentage reporting critical or important 51% 43% 2.44 of 5 2.22 of 5 78% 2. Project Sites 3. JBoss 3.17 of 5 39% 27% 2.13 of 5 1.87 of 5 1. Central Repository 4. Atlassian 5. GitHub 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 15. Here’s what you said matters about the component you useFor the components you use in your applications, howimportant are these attributes? 19% 18% 28% 25% 32% 22% 25% 27% 51% 51% 34% 39% Security Code Quality Project Maturity Licensing Mission critical Extremely important Somewhat important Minor concern Not a concern at all 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 16. Transforming Software Development
  • 17. Only half of you have an open source policyDoes your organization have an open source policy? 51% No 49% Yes 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 18. You told us, most of your organizations lack control over OS usageControl of artifacts in development 20% We’re completely locked down. We can only use approved components. 43% We have some corporate standards, but they aren’t enforced. 37% There are no standards. Each developer team choose the components that are best for their project. 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 19. Interestingly, enforcement seems to be on the riseControl of Artifacts in Development 37% 45% in 2011 There are no standards, each development team chooses their own components. 43% 42% in 2011 We have some corporate standards, but they aren’t enforced. 20% 13% in 2011 We’re completely locked down. We can only use approved components. 2011/2012 Sonatype surveys of developers, architects, and managers (2011 n=1,600; 2012 n=2,550) Transforming Software Development
  • 20. Regulated industries are more likely to be locked downControl of Artifacts by SectorWe are completely locked down. We can only use approved components.31% 25% 21% 18% 19% 19% 13% 12% Fi Te C Te M M G O on ov th n an ed ch l ec an e t su ia uf / r om & ci IS ac lti & M al V n m En tu ili Se g un ri ta te rv ng r r ic y ta ic a es in tio m ns en t 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 21. Only 23% of you need approval before using OS componentsDoes your organization have an open source policy? 51% Do not have a policy 26% Have a policy 23% Must have approval before using any open source components 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 22. For those of you with policies...more than half of you hate them Transforming Software Development
  • 23. Lots of groups are responsible for open source policyWho is responsible for Open Source Governance? Development Teams Legal 18% 16% Security 6%OSS/FOSS Committee/ 12% 7% Risk and Compliance Department 15% 28% IT Operations Application Development Management 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 24. Does your open source policy restrict component usagebased on specific licenses? Over 3/4 of organizations restrict component usage based on specific licensesYes and we examine every component Yes and we examine every componentand *all* of its dependencies but *not* its dependencies 51% 25%No, our policy does not restrict componentusage based on licensing 24% 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 25. Policy restricting component usage based on specific licensesPolicy restricting component usage based on specific licenses: Yes and we examine every component and *all* of its dependencies 51% Yes and we examine every component but *not* its dependencies 25% 49% have no effective licensing policy No, our policy does not restrict component usage based on licensing 24% 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 26. Transforming Software Development
  • 27. Does your organization maintain an inventory of opensource components used in production applications? 48% No 32% Yes, for all components including dependencies 20% Yes, for all components but NOT their dependencies 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 28. It’s difficult to know when components & dependencies are updatedWhen a component is updated, how do you know?74% By searching the web 66% Keeping up with project sites 40% From colleagues 30% Word of mouth 20% No good way to find out 2012 Sonatype survey of 2,550 developers, architects, and managers Transforming Software Development
  • 29. Thank you!Transforming Software Development