A

A timeline of recent open source CVE intensity and volume

Hacker News

A timeline of recent open source CVE intensity and volume

I was curious what it would look like if I plotted the intensity and volume of software supply chain CVEs over time, given what seemed like a flood of compromises lately. It looked exactly as I expected, and I expect it to get worse before it gets better. Yes, an LLM was used but because I wanted the simplest possible architecture, I steered away from using any back end at all. Instead it's just GitHub pages with a static json document as the source of data, updated daily by a GitHub action which stores and parses the OSV repository. I wanted to include the Linux kernel but the complexities around how CVEs are assigned there made it difficult -- if I find a simple solution in future I'll add it.

Share card

Actual performance

2points
Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →
Product HuntOn track for Day 1 leaderboard · Strong signals: using, open · Missing: mac, agents, macos
80%80% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
best fitHighest predicted score across all platforms for this description.
TrustMRRLess likely to generate early MRR · Strong signals: way · Missing: mobile apps, ios, personal
48%48% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
Hacker NewsMay not resonate with HN audience · Strong signals: open source, io · Missing: https docs, excited, just released
48%48% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting
42%42% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive
36%36% predicted probability of success on AppSumo, based on ML models trained on real launch data.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
16%16% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto
0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Sl
SlideSelection, an Open Source Hooper Selection Implementation47%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

SlideSelection, an Open Source Hooper Selection Implementation

Hacker News4
Pi
Piki is now open source73%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Piki is now open source

Hacker News2
Op
Open Source CNC Beehive With Arduino and Sensors58%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Open Source CNC Beehive With Arduino and Sensors

Hacker News1
An
An Open-Source Intro to WebApps Curriculum72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

An Open-Source Intro to WebApps Curriculum

Hacker News12
An
An Open-Source Resource for Combating Burnout52%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

An Open-Source Resource for Combating Burnout

Hacker News1
Du
Duckling – Open-source datetime expression parsing69%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Duckling – Open-source datetime expression parsing

Hacker News136
Po
Poll is now open-source58%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Poll is now open-source

Hacker News1
Pi
PinPoint open source geocoder62%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

PinPoint open source geocoder

Hacker News1
Cr
Crayfish, an open source, shareware newsreader73%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Crayfish, an open source, shareware newsreader

Hacker News2
Cy
Cypht – Open Source webmail revisited73%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Cypht – Open Source webmail revisited

Hacker News3