Assertion Supported AI assessment confidence: 95% certainty 4/5 debate potential 1/5

The average modern software application is at least 75% open-source

Ben Williams · How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk) · Nov 6, 2022 · at 11:59

Ben Williams, VP of Product at Snyk, explains why open-source dependency security became a major vulnerability vector in software development.

0:00 / 0:06exact quote · 6.3s

▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark

“The average software application today is at least 75% of open source libraries and components.”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

The average modern software application consists of at least 75% open-source libraries and components.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

Standard software composition analysis (SCA) industry benchmarks published around 2022 confirm that open-source code and components accounted for at least 75% of the average modern software application. Specifically, the Synopsys 2021 Open Source Security and Risk Analysis (OSSRA) report found that open-source code comprised 75% of analyzed application codebases, while the 2022 OSSRA report found that figure rose to 78% (and 76% in the 2023 report). Equivalent reports from the Linux Foundation, Snyk, and Sonatype similarly established that open-source components constitute between 70% and 90% of total modern application code.

Synopsys 2021 OSSRA Report: Open-source code comprised 75% of the total code across 1,548 audited commercial applications.
Synopsys 2022 OSSRA Report (published April 2022): Open-source software accounted for 78% of the code across 2,409 audited commercial codebases.
Linux Foundation / Snyk 2022 Report: Open-source components estimated to constitute between 70% and 90% of modern application codebases.

Checked against

[1] darkreading.com [2] devops.com [3] techtarget.com [4] blackduck.com [5] medium.com [6] nuaware.com [7] snyk.io [8] intel.com

Synopsys Open Source Security and Risk Analysis report 2022 percentage open source "OSSRA" "78%" OR "75%" OR "76%" "codebases" "open source" 2022 "75% of the code" "OSSRA" 2021 OR 2020 "78% of the code" "OSSRA" 2022 Synopsys OSSRA 2022 report average percentage open source codebase "Open Source Security and Risk Analysis" "78%" OR "75%" 2022 "average" OR "codebases" Synopsys OSSRA 2021 2022 2023 percentage of codebase open source Sonatype state of the software supply chain report 2022 open source percentage codebase

assessed as of 2026-09-03

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

open source libraries software applications

⚑ Spot an error? Report it

More from Ben Williams

Insight

Developer tool adoption requires integrating directly into workflows to protect flow

“Flow is just this incredibly important concept for developers and you want to strive to keep them in that flow for as long as possible. So the GitHub kind of pull requests are a great example of that. Someone can sign up for Snyk and they could theoretically b…”

Ben Williams Nov 6, 2022 ▶ 32:58 How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk)

Prediction Not checkable as stated

Embedding growth marketers within product teams will become the industry norm

“I've actually learned to my surprise that inclusion of growth marketers in the product teams is not all that common. And I personally think there's just a lot of opportunity being missed there. And I expect that to start to become the norm rather than the exce…”

Ben Williams Nov 6, 2022 ▶ 39:24 How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk)

Assertion Not checkable as stated

Snyk's ungated sidecar code scanner drove massive user acquisition and activation

“The team went on to build out a functional sidecar product that Allowed users to basically try sneak without needing to sign up by simply pasting their code in for us to scan and giving them some results there and then. So, you know, we saw really great result…”

Ben Williams Nov 6, 2022 ▶ 42:14 How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk)

Insight

Growth experimentation generates organizational learnings rather than delivering immediate outcomes

“And if you think about experimentation, It's not about delivering outcomes. It's about generating learnings that the organization can leverage effectively to deliver outcomes.”

Ben Williams Nov 6, 2022 ▶ 55:00 How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk)

Assertion Not checkable as stated

Product-led customer cohorts generate significantly higher net revenue retention at Snyk

“And what's, what's fascinating there is that the product driven cohort contribute a relatively greater amount to net retention.”

Ben Williams Nov 6, 2022 ▶ 1:17:17 How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk)

Insight

Developers prioritize deep ecosystem features over broad multi-language support

“A JavaScript developer just won't care if you support Golang or Rust, but will absolutely care if a key feature like automated package upgrades just isn't available for their ecosystem.”

Ben Williams Nov 6, 2022 ▶ 17:53 How Snyk built a product-led growth juggernaut | Ben Williams (VP of Product at Snyk)

The average modern software application is at least 75% open-source

More from Ben Williams

Turn any episode into a week of clips.