
Loading

Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.

Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development.
Summary
Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open source software package (at Google)?” Study suggests that most updates to its internal copies of open source packages should take four engineering hours or less.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Source code, and the third-party packages it depends on, is one of the most overlooked parts of an organization's real attack surface. A secure code review catches exactly this class of issue before it ships, not after it's already public.
Coverage details
We've archived 817 other articles touching the same topic (software development, open source, news) , see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.