Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/joshbressers/statuses/113600810291302610">Josh Bressers (joshbressers@infosec.exchange)'s status on Friday, 06-Dec-2024 00:00:04 JST</a><a href="https://infosec.exchange/@joshbressers" title="joshbressers@infosec.exchange"><img src="https://gnusocial.jp/avatar/138318-48-20241116184835.webp" width="48" height="48" alt="Josh Bressers" style="position: absolute; left: 0; top: 0;">Josh Bressers</a><div><a href="https://mastodon.social/@bagder/113598719503383289" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/295165" title="ecosystems@mastodon.social">Ecosyste.ms</a></li></ul></div></section><article><p><a href="https://mastodon.social/@bagder">@bagder</a> That number probably came from the episode with Brian Fox from Sonatype. 700K was the number of malicious packages :)</p><p>I like to look at the data from <a href="https://mastodon.social/@ecosystems">@ecosystems</a> </p><p>They are tracking 10 million open source projects, 2.7 million of those published something in the last year</p><p>Of those 2.7 million</p><p>About 20,000 have more than one million downloads</p><p>Which is still a pretty wild number. And the Ecosyste.ms data doesn't have download numbers for everything, so there are generous error bars</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4128852#notice-8068476">In conversation</a><time datetime="2024-12-06T00:00:04+09:00" title="Friday, 06-Dec-2024 00:00:04 JST">about 6 months ago</time> <span>from <span><a href="https://infosec.exchange/@joshbressers/113600810291302610" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@joshbressers/113600810291302610">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://ecosyste.ms/">Ecosyste.ms</a></h5><div></div></header><div>Tools and open datasets to support, sustain, and secure critical digital infrastructure.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Josh Bressers (joshbressers@infosec.exchange)'s status on Friday, 06-Dec-2024 00:00:04 JSTJosh Bressers
in reply to
- daniel:// stenberg://
- Ecosyste.ms
@bagder That number probably came from the episode with Brian Fox from Sonatype. 700K was the number of malicious packages :)
I like to look at the data from @ecosystems
They are tracking 10 million open source projects, 2.7 million of those published something in the last year
Of those 2.7 million
About 20,000 have more than one million downloads
Which is still a pretty wild number. And the Ecosyste.ms data doesn't have download numbers for everything, so there are generous error bars
In conversationabout 6 months ago from infosec.exchangepermalink
Attachments
1. No result found on File_thumbnail lookup.
  Ecosyste.ms
  Tools and open datasets to support, sustain, and secure critical digital infrastructure.

Public

Embed Notice

HTML Code

Corresponding Notice