CYBERSECURITYTRACKER
Permanent story citation

What makes some open source updates so difficult?

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9978

As cited

Copy frozen at (site build).

research

What makes some open source updates so difficult?

Google published a case study examining the engineering effort required to maintain internal copies of open source software packages. Most updates demand four hours or less of engineering time, while complex updates can stretch to days or months.

Why it matters: Organizations relying on open source face variable maintenance costs: practitioners should budget for updates that range from routine four-hour tasks to months-long efforts depending on package complexity and dependency impact.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary