Developers' Top Pain Points in Open Source Runtimes
December 03, 2018

Bart Copeland
ActiveState

ActiveState surveyed developers and programmers in 92 countries to better understand their pain points and assess how businesses can better work with their organizations. The survey results establish a starting point for understanding the challenges that coders (developers, engineers, data scientists, QA and so on) confront when working with open source runtimes.

Blocks to Productivity

One fact the survey highlighted is that developers need to streamline their workflow in order to increase productivity. Developers and programmers spend only two to four hours of their day programming, on average. Productivity is disrupted due to time spent managing other issues such as polyglot environments and retrofitting. Enterprises are lacking resources that developers need to streamline their workflow.

The survey confirmed that security, defined here as being up to date with the latest or most secure version of packages used, is suffering. Management is unable to assess risks due to lack of visibility. For instance, 61 percent of respondents found it difficult or very difficult to get information about package quality – security, activity or updates.

Production code isn't being tracked, creating a gap in vulnerability assessment. This creates additional issues in security as there is lack of visibility of where code is specifically running that requires updates or patches. Consequently, half of developers surveyed expressed a deep concern about security.

In addition, new tool adoption turns out to be more cumbersome than helpful. In fact, developers already spend 74 % of their time managing dependencies and development tools. A whopping 67 % – more than two-thirds – opted out of implementing a new programming language due to the hassle of incorporating a new programming language. Not surprisingly, adding or incorporating a programming language into an organization was rated the most difficult challenge, by a significant margin; 56% of all respondents rated this as difficult or very difficult.

Bridging the Developer-Enterprise Gap

The above survey data is an invaluable tool to measure and track progress towards solving open source runtime pains that developers are experiencing. In order to relieve developers of these pains and better enable quicker release updates, we need to look at a top-down and bottom-up approach. The gap between the developer and the enterprise needs to be bridged through clear communication of needs.

One approach is to have a "bill of materials" of all the packages running in production as well as the applications and their respective dependencies of where the code is running.

Another approach is to facilitate the developer implementing what's required from a license and security perspective. Solving developers' problem spots will increase their productivity and their job satisfaction, benefiting developers and their organizations alike.

Bart Copeland is CEO and President of ActiveState
Share this

Industry News

April 17, 2025

GitLab announced the general availability of GitLab Duo with Amazon Q.

April 17, 2025

Perforce Software and Liquibase announced a strategic partnership to enhance secure and compliant database change management for DevOps teams.

April 17, 2025

Spacelift announced the launch of Saturnhead AI — an enterprise-grade AI assistant that slashes DevOps troubleshooting time by transforming complex infrastructure logs into clear, actionable explanations.

April 16, 2025

CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.

April 16, 2025

Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.

April 15, 2025

Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.

April 14, 2025

LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.

April 14, 2025

Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.

April 14, 2025

Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.

April 10, 2025

Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.

April 10, 2025

Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.

April 10, 2025

The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.

April 09, 2025

Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.

April 09, 2025

SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.

April 09, 2025

Akamai Technologies introduced App & API Protector Hybrid.