Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

Vandana Verma Sehgal co-authored this Snyk and Redhunt Labs research piece on the security posture of popular GitHub repositories. The study scanned the top 1000 GitHub organizations and analyzed Java, JavaScript, Python, and Ruby repositories for vulnerable dependencies.

The published findings note that 11,900 repositories were examined and 1,229,601 vulnerabilities were identified across 15,584 vulnerable dependency files. The piece highlights major trends including Java deserialization issues, JavaScript prototype pollution, and high-risk Python and Ruby dependency exposures.

Reference
https://snyk.io/blog/snyk-redhunt-labs-scanning-top-1000-orgs-on-github/