The Forrester Wave: Software Composition Analysis

Learn about the leader in software composition analysis

A comprehensive evaluation of “the six [SCA] providers that matter most and how they stack up,” The Forrester Wave™: Software Composition Analysis, Q1 2017 assesses the current state of the software composition analysis market and provides in-depth analysis of the six providers.

Two surprising statistics are noted in the Forrester Wave report:

  • “Developers use open source components as their foundation, creating applications using only 10% to 20% new code.” 
  • “Unfortunately, many of these [open source] components come with liabilities in their license agreements, and one out of every 16 open source download requests is for a component with a known vulnerability.” 

Download report