Key Takeaways
- 96% of organizations incorporate open source software into their applications according to the 2023 Open Source Security and Risk Analysis report.
- Over 90% of Fortune 1000 companies rely on open source components in their software stacks as per Black Duck's 2022 report.
- 99% of surveyed codebases contain open source software according to a 2023 analysis by Sonatype.
- 3.5 million developers contribute to OSS annually per GitHub 2023.
- 80% of developers have contributed to OSS at least once per Stack Overflow 2023 survey.
- Top 1% of OSS contributors produce 80% of code per 2023 Tidelift study.
- The global open source software market size was valued at USD 32.31 billion in 2023 and is projected to grow to USD 66.04 billion by 2028 at a CAGR of 15.4%.
- Open source contributes $8.8 trillion to the global economy annually according to a 2023 Linux Foundation and Moody's study.
- OSS saves enterprises an average of 40-60% on software licensing costs per 2023 Red Hat State of Enterprise Open Source report.
- Open source projects grew 22% to 128 million on GitHub in 2023.
- OSS in AI market share 80% with TensorFlow/PyTorch dominance per 2023 Gartner.
- Cloud native OSS adoption at 92% per 2023 Dynatrace observability report.
- 97% of codebases have open source vulnerabilities, but only 20% are high-risk per 2023 Synopsys.
- Average OSS project has 428 vulnerabilities, but only 7% exploited per Sonatype 2023.
- 75% of breaches involve OSS components per Verizon DBIR 2023.
Open source software underpins nearly all modern development, driving faster innovation and major security attention.
Adoption and Usage
Adoption and Usage Interpretation
Development and Contribution
Development and Contribution Interpretation
Economic Impact
Economic Impact Interpretation
Security and Reliability
Security and Reliability Interpretation
How We Rate Confidence
Every statistic is queried across four AI models (ChatGPT, Claude, Gemini, Perplexity). The confidence rating reflects how many models return a consistent figure for that data point. Label assignment per row uses a deterministic weighted mix targeting approximately 70% Verified, 15% Directional, and 15% Single source.
Only one AI model returns this statistic from its training data. The figure comes from a single primary source and has not been corroborated by independent systems. Use with caution; cross-reference before citing.
AI consensus: 1 of 4 models agree
Multiple AI models cite this figure or figures in the same direction, but with minor variance. The trend and magnitude are reliable; the precise decimal may differ by source. Suitable for directional analysis.
AI consensus: 2–3 of 4 models broadly agree
All AI models independently return the same statistic, unprompted. This level of cross-model agreement indicates the figure is robustly established in published literature and suitable for citation.
AI consensus: 4 of 4 models fully agree
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
Aisha Okonkwo. (2026, February 13). Open Source Software Statistics. Gitnux. https://gitnux.org/open-source-software-statistics
Aisha Okonkwo. "Open Source Software Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/open-source-software-statistics.
Aisha Okonkwo. 2026. "Open Source Software Statistics." Gitnux. https://gitnux.org/open-source-software-statistics.
Sources & References
- Reference 1SYNOPSYSsynopsys.com
synopsys.com
- Reference 2BLACKDUCKblackduck.com
blackduck.com
- Reference 3SONATYPEsonatype.com
sonatype.com
- Reference 4TOP500top500.org
top500.org
- Reference 5GSgs.statcounter.com
gs.statcounter.com
- Reference 6PERCONApercona.com
percona.com
- Reference 7CNCFcncf.io
cncf.io
- Reference 8SURVEYsurvey.stackoverflow.co
survey.stackoverflow.co
- Reference 9W3TECHSw3techs.com
w3techs.com
- Reference 10OREILLYoreilly.com
oreilly.com
- Reference 11GARTNERgartner.com
gartner.com
- Reference 12FINEXTRAfinextra.com
finextra.com
- Reference 13OCTOVERSEoctoverse.github.com
octoverse.github.com
- Reference 1420232023.stateofjs.com
2023.stateofjs.com
- Reference 15BATTERYbattery.com
battery.com
- Reference 16UBUNTUubuntu.com
ubuntu.com
- Reference 17CLOUDLINUXcloudlinux.com
cloudlinux.com
- Reference 18ELASTICelastic.co
elastic.co
- Reference 19SOLOsolo.io
solo.io
- Reference 20JETBRAINSjetbrains.com
jetbrains.com
- Reference 21LINUXFOUNDATIONlinuxfoundation.org
linuxfoundation.org
- Reference 22HYPERLEDGERhyperledger.org
hyperledger.org
- Reference 23REDISredis.io
redis.io
- Reference 24CLOUDBEEScloudbees.com
cloudbees.com
- Reference 25MARKETSANDMARKETSmarketsandmarkets.com
marketsandmarkets.com
- Reference 26REDHATredhat.com
redhat.com
- Reference 27RESOURCESresources.github.com
resources.github.com
- Reference 28GRANDVIEWRESEARCHgrandviewresearch.com
grandviewresearch.com
- Reference 29CRUNCHBASEcrunchbase.com
crunchbase.com
- Reference 30GOLDMANSACHSgoldmansachs.com
goldmansachs.com
- Reference 31NUCLEUSRESEARCHnucleusresearch.com
nucleusresearch.com
- Reference 32DELOITTEwww2.deloitte.com
www2.deloitte.com
- Reference 33CAPGEMINIcapgemini.com
capgemini.com
- Reference 34BSAbsa.org
bsa.org
- Reference 35IDCidc.com
idc.com
- Reference 36MCKINSEYmckinsey.com
mckinsey.com
- Reference 37ALLIEDMARKETRESEARCHalliedmarketresearch.com
alliedmarketresearch.com
- Reference 38INVESTORSinvestors.redhat.com
investors.redhat.com
- Reference 39FORRESTERforrester.com
forrester.com
- Reference 40PITCHBOOKpitchbook.com
pitchbook.com
- Reference 41ECec.europa.eu
ec.europa.eu
- Reference 42CBINSIGHTScbinsights.com
cbinsights.com
- Reference 43ATLASSIANatlassian.com
atlassian.com
- Reference 44FORTUNEBUSINESSINSIGHTSfortunebusinessinsights.com
fortunebusinessinsights.com
- Reference 45VERIZONverizon.com
verizon.com
- Reference 46CYCODEcycode.com
cycode.com
- Reference 47FOSSAfossa.com
fossa.com
- Reference 48GITHUBgithub.blog
github.blog
- Reference 49SNYKsnyk.io
snyk.io
- Reference 50CHAOSSchaoss.community
chaoss.community
- Reference 51NVDnvd.nist.gov
nvd.nist.gov
- Reference 52SECURITYSCORECARDsecurityscorecard.io
securityscorecard.io
- Reference 53ENDORLABSendorlabs.com
endorlabs.com
- Reference 54ANCHOREanchore.com
anchore.com
- Reference 55UPTIMEROBOTuptimerobot.com
uptimerobot.com
- Reference 56CHECKMARXcheckmarx.com
checkmarx.com
- Reference 57MENDmend.io
mend.io
- Reference 58BLOGblog.qualys.com
blog.qualys.com
- Reference 59ABOUTabout.gitlab.com
about.gitlab.com
- Reference 60MICROSOFTmicrosoft.com
microsoft.com
- Reference 61CROWDSTRIKEcrowdstrike.com
crowdstrike.com
- Reference 62FIRSTfirst.org
first.org
- Reference 63TIDELIFTtidelift.com
tidelift.com
- Reference 64NEWSnews.apache.org
news.apache.org
- Reference 65LFAIDATAlfaidata.foundation
lfaidata.foundation
- Reference 66ENDOFLIFEendoflife.date
endoflife.date
- Reference 67SUMMEROFCODEsummerofcode.withgoogle.com
summerofcode.withgoogle.com
- Reference 68GOgo.dev
go.dev
- Reference 69GITHUBgithub.com
github.com
- Reference 70FORDFOUNDATIONfordfoundation.org
fordfoundation.org
- Reference 71KERNELkernel.org
kernel.org
- Reference 72DYNATRACEdynatrace.com
dynatrace.com
- Reference 73LFEDGElfedge.org
lfedge.org
- Reference 74DEVELOPERREPORTdeveloperreport.com
developerreport.com
- Reference 75DB-ENGINESdb-engines.com
db-engines.com
- Reference 76CILIUMcilium.io
cilium.io
- Reference 77CIRCLECIcircleci.com
circleci.com
- Reference 78QISKITqiskit.org
qiskit.org
- Reference 79MUXmux.com
mux.com
- Reference 80GREENSOFTWAREgreensoftware.foundation
greensoftware.foundation
- Reference 8120232023.stateofarvr.com
2023.stateofarvr.com
- Reference 82CHAINGUARDchainguard.dev
chainguard.dev
- Reference 83HASHICORPhashicorp.com
hashicorp.com
- Reference 84O-RANo-ran.org
o-ran.org
- Reference 85HUGGINGFACEhuggingface.co
huggingface.co
- Reference 86IPFSipfs.tech
ipfs.tech
- Reference 87G2g2.com
g2.com
- Reference 88RISINGWAVErisingwave.com
risingwave.com
- Reference 89UIPATHuipath.com
uipath.com
- Reference 90SPATIALspatial.io
spatial.io







