October 2018 Summaries

The Java developer community was surveyed, with over 10,200 respondents sharing their experiences with the Java Development Kit (JDK) and platform. The majority of developers use Oracle JDK in production, followed by OpenJDK. Most applications are built using Java SE version 8, while a smaller portion have migrated to newer versions such as Java 9 or higher. There is still uncertainty about how to respond to the new release cadence, with nearly one-third of developers not knowing how they will handle it. The survey also found that Kotlin has surpassed Groovy and Scala in popularity among JVM languages, and most developers use Java for their main applications.

The Java developer community has been surveyed, with over 10,200 respondents providing insights into their tools and practices. IntelliJ IDEA has gained significant ground, becoming the most used IDE among developers, while Eclipse still maintains a loyal following. Maven dominates as the primary build tool, with Gradle gaining traction due to its support for Kotlin. Static quality tools like SonarQube, Findbugs, and Checkstyle are widely used, but 36% of respondents don't use any static quality tool at all. Security testing is also becoming increasingly important, with most developers not using any static security tool in their pipeline. Jenkins takes the lead as the CI server, but a significant portion of developers don't use CI for their projects. Git has convincingly won the horse race in source code management, while GitHub, Bitbucket, and GitLab share an almost even market for code repositories. JUnit is widely used as the primary testing technology, with Mockito emerging as the preferred mocking framework. Overall, the survey highlights the importance of using tools to improve development efficiency and security.

We've released an update that allows group admins to copy org settings from an existing org to a new one, via our API or UI, enabling customers to speed up the process of setting up integrations and license policies for multiple organizations with similar configurations.` `The new feature does not keep copied settings in sync between orgs, but will allow for future sharing of settings between orgs within a group, with more fine-grained control over which settings are shared.` `This update is part of our efforts to improve the speed and efficiency of creating and managing organizations on Snyk, until broader group-level settings work can be completed.

Today we’re delighted to share that we’re launching a free-tier version of our Container Vulnerability Management solution, in general availability. Our Container Vulnerability Management solution enables developers to test, fix and monitor open source vulnerabilities in their Docker container images. The new free tier will include up to 100 tests per month for scanning Docker images and provide actionable remediation advice for fixing vulnerabilities in Docker images, including recommending upgrades for vulnerable libraries and suggesting alternative Docker base images to eliminate multiple vulnerabilities at once. Additionally, a recommendations section will now appear if the base image can be upgraded, providing developers with even more guidance on securing their containers.