Quantifies the extreme 'infant mortality' rate of new open-source projects and identifies funding as a critical mitigating factor for abandonment risk.
Startling research indicates that a staggering 95% of newly created open-source projects are abandoned within their first year, creating a massive 'mortality cliff' for new dependencies. The study identifies three primary models for long-term sustainability: corporate backing (e.g., React), community-driven development, and voluntary donations. However, traditional donation models are historically irregular and lack visibility for donors, leading to the creation of 'issue-based' platforms like OpenPledge to specifically incentivize maintainers to address critical security and technical debt issues in underfunded but widely used projects.
The 95% abandonment rate for new projects validates that a complete lack of ongoing support is the default state for the vast majority of open source.
dependency on 'zombie' code that will never receive updates or security fixes
identifying abandoned repositories is essential for catching the 95% of projects that fail to survive their first year.
New projects are shown to have a 95% failure rate within 12 months, making 'project age' a primary indicator of sustainability risk.
exposure to the high operational risk of project collapse during its first year of existence
flagging new repositories directly targets the high-mortality phase of the open source lifecycle identified in the research.
95% of newly created open source projects meet abandonment within a year.
Risk Guard evaluates project activity but does not explicitly flag 'High Probability Abandonment' for projects in their first 12 months.
Risk Guard would be better if it applied a 'New Project Probation' period, flagging any package under 12 months old as high-risk for sudden abandonment.