Skip to content
Tech News
← Back to articles

10 trillion downloads are crushing open-source repositories - here's what they're doing about it

read original get GitHub Copilot Subscription → more articles
Why This Matters

The staggering volume of 10 trillion open-source downloads annually is straining repositories, risking supply chain resilience and highlighting the need for sustainable funding and governance. This situation underscores the critical role of open-source software in the tech industry and the urgency to support its infrastructure to ensure continued innovation and security for consumers and businesses alike.

Key Takeaways

gremlin/ E+ via Getty Images

Follow ZDNET: Add us as a preferred source on Google.

ZDNET's key takeaways

Open-source repositories are collapsing under the strain of 10 trillion downloads annually.

All the major repositories are joining together to tackle this problem.

While a lack of funds is a major part of the problem, other issues need to be addressed.

The world runs on open-source software. We all know that. But did you know that companies download over 10 trillion (that's trillion with a T) open-source code files every year? According to software security provider Sonatype, they do --and the file repository sites that supply that code are burning out from the demand.

As Sonatype CTO Brian Fox, who oversees the Maven Central Java registry, told me earlier this year, Maven is in danger of being overwhelmed by constant downloads. Fox and company have found that 82% of demand comes from just 1% of IPs. That's because companies are using open-source repositories as if they were content delivery networks (CDNs).

Also: 98% of IT leaders want digital sovereignty: Now SUSE is operationalizing it for companies everywhere

For example, a single company might download the same code hundreds of thousands of times in a day, and the next day, and the next. What's a non-profit, open-source code repository to do?

... continue reading