Tag: open source

An Open Source Risk Sherpa
Open source software (OSS) has clearly become ubiquitous with over 70% of applications utilizing open source components according to Gartner. Although this is helping organizations dramatically reduce the time to market of delivering software, Common Vulnerabilities and Exposures (CVEs) within OSS components continue to be a significant risk. For example, the Heartbleed vulnerability affected over 66% of all active websites in the world with an estimated cost of almost $500 million to fix it.
Greg Rivera
Jun 27, 2022
CliffsNotes for Open Source Licensing
Organizations everywhere are adopting the use of open-source software components at a high rate within their custom-built software applications to speed up the development process. However, this introduces risks such as the legal implications of the open-source license attached to open source components which governs how it can be used legally. The legal requirements of these licenses can be complex and confusing for individuals without expertise in intellectual property laws. What if there were an easier way to interpret the requirements of an open source license without needing a degree in intellectual property law?
Greg Rivera
Apr 11, 2022
Building an Open Source Control Tower for Your Application Portfolio
Greg Rivera
Nov 2, 2021
How data visualization makes it easier to manage open source risks and assess application portfolios for cloud migration
Check out CAST Highlight's latest release features
Greg Rivera
Oct 3, 2019
Software Composition Analysis: How Open Source Component Detection Works
Software Intelligence Automatically Retrieves the True Origin of Source Code.
Michael Muller
Apr 2, 2019
A Good Look at Open Source Frameworks: Avoiding Another Equifax
Open source is the lifeblood of modern software development, but it's not without risks, especially when it comes to application security.
Lev Lesokhin
Sep 19, 2017
Software Quality is More than Good Code

Over the past decade, advancements in static analysis tools from both commercial and open source communities have dramatically improved the detection of developer violations of good coding practices. The ability to detect these issues in coding practices provides the promise of better software quality.

Jonathan Bloom
Jun 3, 2015
6 Hidden Costs of Building Your Own Open Source Code Analyzer Platform

Thinking about building your own multi-language custom source code analyzer platform using open source components?  Sure, the upsides seem to add up: no licensing fees, great customization ability, and an impressive new entry on your resume (making it even shinier).  Read that project charter once more before you sign it in ink, because our experience has shown it’s not quite that simple.

John Chang
Aug 18, 2014
Software Quality: The Problem with Ignoring the Open Source Quality
Securing open source - Lev Lesokhin spoke with CSO Online about how large IT organizations can secure their business critical applications from known vulnerabilities and shoddy software quality. Be sure to check...
Stephanie W.
Jul 2, 2014
Open source is wrapping its hands around the federal government’s infrastructure
Stephanie W.
May 2, 2013
Sibling Rivalry: Code Quality & Open Source

We know there’s “no such thing as a free lunch,” that “freedom isn’t free” and that if you get something for free, you probably got what you paid for. Even in the tech industry, when we talk about open source software, we immediately think “free”, yet instantly jump to the old caveat of “think free speech, not free beer,” the idea there being that open source is the layer-by-layer developed product of well-intentioned developers seeking to produce high quality software that competes with established applications.

Jonathan Bloom
Sep 26, 2011