Analyzed
about 7 hours
ago.
based on code collected
about 7 hours
ago.
Project Summary
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library.
OpenSSL is licensed under an Apache-style license, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions.
In a Nutshell, OpenSSL...
- ...
- ...
-
...
has a well established, mature codebase
maintained by a very large development team
with stable Y-O-Y commits -
...
took an estimated 267 years of effort (COCOMO model)
starting with its first commit in December, 1998
ending with its most recent commit 2 days ago
Quick Reference
https://github.com/openssl/openssl
Project Security
Vulnerabilities per Version ( last 10 releases )
Project Vulnerability Report
Security Confidence Index
Poor security track-record
Favorable security track-record
Vulnerability Exposure Index
Many reported vulnerabilities
Few reported vulnerabilities
Did You Know...
-
...
55% of companies leverage OSS for production infrastructure
-
...
anyone with an Open Hub account can update a project's tags
-
...
there are over 3,000 projects on the Open Hub with security vulnerabilities reported against them
-
...
learn about Open Hub updates and features on the Open Hub blog
30 Day SummaryOct 10 2025 — Nov 9 2025
|
12 Month SummaryNov 9 2024 — Nov 9 2025
|
Static Analysis ( Generated by Coverity Scan for openssl/openssl )
Repository URL: https://github.com/openssl/openssl
Version: 2025-11-09\ 1b2e3bd
- 2025-11-09
- Last Analyzed
- 673,744
- Lines of Code Analyze
- 0.0
- Defect Density
Defects by status for current build
- 1,895
- Total defects
- 1
- Outstanding
- 1,590
- Fixed
CWE Top 25 defects
No top 25 CWE defects were found.