Developers' Top Pain Points in Open Source Runtimes
December 03, 2018

Bart Copeland
ActiveState

ActiveState surveyed developers and programmers in 92 countries to better understand their pain points and assess how businesses can better work with their organizations. The survey results establish a starting point for understanding the challenges that coders (developers, engineers, data scientists, QA and so on) confront when working with open source runtimes.

Blocks to Productivity

One fact the survey highlighted is that developers need to streamline their workflow in order to increase productivity. Developers and programmers spend only two to four hours of their day programming, on average. Productivity is disrupted due to time spent managing other issues such as polyglot environments and retrofitting. Enterprises are lacking resources that developers need to streamline their workflow.

The survey confirmed that security, defined here as being up to date with the latest or most secure version of packages used, is suffering. Management is unable to assess risks due to lack of visibility. For instance, 61 percent of respondents found it difficult or very difficult to get information about package quality – security, activity or updates.

Production code isn't being tracked, creating a gap in vulnerability assessment. This creates additional issues in security as there is lack of visibility of where code is specifically running that requires updates or patches. Consequently, half of developers surveyed expressed a deep concern about security.

In addition, new tool adoption turns out to be more cumbersome than helpful. In fact, developers already spend 74 % of their time managing dependencies and development tools. A whopping 67 % – more than two-thirds – opted out of implementing a new programming language due to the hassle of incorporating a new programming language. Not surprisingly, adding or incorporating a programming language into an organization was rated the most difficult challenge, by a significant margin; 56% of all respondents rated this as difficult or very difficult.

Bridging the Developer-Enterprise Gap

The above survey data is an invaluable tool to measure and track progress towards solving open source runtime pains that developers are experiencing. In order to relieve developers of these pains and better enable quicker release updates, we need to look at a top-down and bottom-up approach. The gap between the developer and the enterprise needs to be bridged through clear communication of needs.

One approach is to have a "bill of materials" of all the packages running in production as well as the applications and their respective dependencies of where the code is running.

Another approach is to facilitate the developer implementing what's required from a license and security perspective. Solving developers' problem spots will increase their productivity and their job satisfaction, benefiting developers and their organizations alike.

Bart Copeland is CEO and President of ActiveState
Share this

Industry News

February 20, 2025

GitLab announced the general availability of GitLab Duo Self-Hosted.

February 20, 2025

Tigera announced the introduction of several new innovations to Calico, including a new Ingress Gateway capability for Calico Cloud and Calico Enterprise, and the launch of Calico Dashboards.

February 20, 2025

Copado introduced three AI-powered DevOps apps for Slack.

February 20, 2025

Gearset announced that it now supports Salesforce's Agentforce.

February 19, 2025

Sonar announced the acquisition of AutoCodeRover, an autonomous AI agent platform for software development.

February 19, 2025

Faros AI announced a collaboration with Microsoft to deliver its AI-powered platform for optimizing engineering workflows on Azure.

February 19, 2025

Apollo GraphQL announced the general availability of Apollo Connectors for REST APIs and new GraphOS platform enhancements — giving enterprises a faster, more efficient way to execute their API strategies.

February 18, 2025

Check Point® Software Technologies Ltd.(link is external) announced that its Check Point CloudGuard solution has been recognized as a Leader across three key GigaOm Radar reports: Application & API Security, Cloud Network Security, and Cloud Workload Security.

February 13, 2025

LaunchDarkly announced the private preview of Warehouse Native Experimentation, its Snowflake Native App, to offer Data Warehouse Native Experimentation.

February 13, 2025

SingleStore announced the launch of SingleStore Flow, a no-code solution designed to greatly simplify data migration and Change Data Capture (CDC).

February 13, 2025

ActiveState launched its Vulnerability Management as a Service (VMaas) offering to help organizations manage open source and accelerate secure software delivery.

February 12, 2025

Genkit for Node.js is now at version 1.0 and ready for production use.

February 12, 2025

JFrog signed a strategic collaboration agreement (SCA) with Amazon Web Services (AWS).

February 12, 2025

mabl launched of two new innovations, mabl Tools for Playwright and mabl GenAI Test Creation, expanding testing capabilities beyond the bounds of traditional QA teams.

February 11, 2025

Check Point® Software Technologies Ltd.(link is external) announced a strategic partnership with leading cloud security provider Wiz to address the growing challenges enterprises face securing hybrid cloud environments.