“Nearly 80 percent of those surveyed use open source tools, the data suggests, while half standardize on an open source development infrastructure stack. A full two-thirds, meanwhile, contribute to open source projects.
“Yet while organizations are adopting open source software at a rapid pace, many don’t have the internal controls and processes in place to do it right, Sonatype warns.
“In fact, only 49 percent of those surveyed said they have an open-source policy in place, and 63 percent said that shared corporate standards either don’t exist or aren’t enforced at their company.
“Forty-nine percent, meanwhile, said they have no effective licensing policy in place. Only 32 percent maintain detailed records of the components used in production applications — including their dependencies — and most said it is difficult to know when components and/or their dependencies are updated.”