4. 3%ITOperations
6%Manager,Director,orExecutive
5%BuildManager
22%Architect
13%TeamLead/ProjectManager
52%SoftwareDeveloper/Engineer
RoleWithintheOrganization

5. 17%FinancialServices
33%Tech&ISV
12%Consulting
6%Telecommunications
2%Manufactoring
5%Media&Entertainment
7%Goverment&Military
18%Other
OrganizationsSurveyed

6. 24%
19%
23%
34%
501+
101-500
26-100
1-25
NumberofDevelopersintheOrganization

7. We’restandardizingonanopensourcedevelopmentinfrastructurestack
49%2011
52%2012
Weonlyuseopensourceinfrastructureifit’scommerciallysupported
7%
10%
2011
2012
2011
2012
2011
2012
It’snotourcorporatestandard,buttonsofpeopleuseit
27%
27%
Afewofourdevelopersuseit,butit’snotwidelyadopted
17%
11%
Doesyourorganizationuseopensource
developmentinfrastructure?

8. Whydoyouusearepositorymanager?
64%
Improve
buildtime
35%
Toenforce
standardsfor
component
usage
32%
Better
visibilityinto
component
usage
67%
Tomanage
component
usage

9. Whydoyouusearepositorymanager?
64%
Improve
buildtime
41%
Toenforce
standardsfor
component
usage
34%
Better
visibilityinto
component
usage
75%
Tomanage
component
usage
Organizationswithover500developers

10. Westrictlyconsumeopensource
34%
Weuseopensourceandcontribute
directlybacktoprojects45%
Weuseopensourceandcontribute
backviaathirdparty12%
Wecontributetoopensource
projectseventhoughourcompany’s
policiesprohibitit
9%
OpenSourceinOrganization
2012Sonatypesurveyof2,550developers,architects,andmanagers
45%
34%
12%
9%

12. 4%
Perl5.
4%
Python4.
14%
C/C++3.
15%
.NET2.
86%
Java1.
Howimportantarethefollowingtypesofopen
sourcecomponentstoyourorganization?
Percentagereportingcritical,prettyimportant,ormedium,butgettingmoreimportant

13. Mustadheretocorporatestandards
35%
70%
Searchthewebforartifactsthatmeetourneeds
35%
Usemasterrepositorysearchtools(eg.CentralRepositorySearch)
42%
Relyontheadviceofmycolleagues
Howdoyoufindartifactsforyourprojects
2012Sonatypesurveyof2,550developers,architects,andmana

14. 1.87of5
27%
GitHub5.
2.13of5
39%
Atlassian4.
2.22of5
43%
JBoss3.
2.44of5
51%
ProjectSites2.
3.17of5
78%
CentralRepository1.
Whatsourcesofopensourcecomponentsare
mostimportanttoyourdevelopmentefforts?
Percentagereportingcriticalorimportant

15. SecurityCodeQualityProjectMaturityLicensing
32%
19%
51%
25%
28%
51%
18%25
34%
27%
39%
22%
MissioncriticalExtremelyimportantSomewhatimportantMinorconcernNotaconcerna
rthecomponentsyouuseinyourapplications,h
portantaretheseattributes?
2012Sonatypesurveyof2,550developers,architects,andmana

17. Doesyourorganizationhaveanopensourcepolicy?
2012Sonatypesurveyof2,550developers,architects,andmanagers
51%No
49%Yes

18. We’recompletelylockeddown.We
onlyuseapprovedcomponents.20%
Wehavesomecorporatestandards,
theyaren’tenforced.43%
Therearenostandards.Eachdevel
teamchoosethecomponentsthat
bestfortheirproject.
37%
ontrolofartifactsindevelopme
2012Sonatypesurveyof2,550developers,architects,andman

19. 13%in2011
20%
45%in2011
37%
42%in2011
43%
We’recompletelylockeddown.Wecanonly
useapprovedcomponents.
Wehavesomecorporatestandards,butthey
aren’tenforced.
Therearenostandards,eachdevelopment
teamchoosestheirowncomponents.
ControlofArtifactsinDevelopment
2011/2012Sonatypesurveysofdevelopers,architects,andmanagers

20. 31%
18%
13%
25%
21%
12%
19%19%
FinancialServices
Tech/ISV
C
onsulting
Telecom
m
unications
M
anufacturing
M
edia
&
Entertainm
ent
G
ovt&
M
ilitary
O
ther
ControlofArtifactsbySector
Wearecompletelylockeddown.Wecanonlyuseapprovedcomponents.

21. 51%Donothaveapolicy
26%Haveapolicy
23%Musthaveapprovalbeforeusinga
opensourcecomponents
oesyourorganizationhaveanopensourcepolic
2012Sonatypesurveyof2,550developers,architects,andmana

23. hoisresponsibleforOpenSourceGovernanc
DevelopmentTeams
16%
6%
7%
28%
15%
12%
18%
Legal
Security
RiskandComplian
ApplicationDevelopmen
Management
ITOperations
OSS/FOSSCommittee/
Department

24. oesyouropensourcepolicyrestrictcomponentusa
sedonspecificlicenses?
2012Sonatypesurveyof2,550developers,architects,andman
andweexamineeverycomponent
*all*ofitsdependencies
Yesandweexamineeverycomponent
but*not*itsdependencies
51%25%
,ourpolicydoesnotrestrictcomponent
gebasedonlicensing
24%
Over3/4oforganizationsrestrictcomponent
usagebasedonspecificlicenses

25. licyrestrictingcomponentusagebasedonspecificlicen
Yesandweexamineeverycomponent
and*all*ofitsdependencies
Yesandweexamineeverycomponent
but*not*itsdependencies
No,ourpolicydoesnotrestrictcomponen
usagebasedonlicensing
51%
25%
24%
havenoeffective
licensingpolicy49%

27. 48%No
32%Yes,forallcomponentsincludingdependencies
20%Yes,forallcomponentsbutNOTtheirdependenci
oesyourorganizationmaintainaninventoryofop
ourcecomponentsusedinproductionapplications
2012Sonatypesurveyof2,550developers,architects,andmana

28. Nogoodwaytofindout
Whenacomponentisupdated,howdoyouknow?
2012Sonatypesurveyof2,550developers,architects,andmanager
74%
40%
30%
20%
66%
Bysearchingtheweb
Keepingupwithprojectsites
Fromcolleagues
Wordofmouth