Unverified50% confidenceFactExact time
哈佛大学与Linux基金会的研究显示，不到10%的开源维护者贡献了超过90%的安全相关代码提交
1
Sources
50%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
hackernewshackernews7/9/2026
Related Claims
Unverified2023年的研究表明，主流LLM生成的代码中约有40%存在某种程度的安全漏洞58% similarUnverifiedA security organization analyzed 5,200 open-source MCP Servers and found that 52% still use outdated static keys, while fewer than 8.5% use secure OAuth authentication.58% similarUnverified2023 年的安全研究显示 npm 注册表中约 10% 的包包含安装脚本，部分执行下载运行外部二进制文件等高风险操作57% similarUnverifiedAI生成的安全漏洞报告此前被视为开源项目的负担，因为看似合理但实际错误的报告给维护者带来巨大验证成本56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/476629API
curl https://kongchang.com/api/v1/knowledge/claims/476629MCP
get_claim(id=476629)