This year's Octoverse report includes three deep dives.

The Productivity Report

The Community Report

The Security Report

Download all 3 reports

The 2020 State of the

Octo
verse

2020 has been a year of extraordinary change. Yet with 60M+ new repositories created this past year, one thing has remained true —

// Highlight to tweet text

This year, the pandemic forced many of us to work remotely and more of our focus was shifted to childcare, schooling, personal health, and how to try to balance it all.

But as the global workplace shifted into its new reality, we also saw an increase in developer connection and camaraderie through open source. With this in mind, an important question to ask is how we make all that work sustainable.

Thanks to automation and collaboration, developers have been able to communicate more effectively and increase efficiency, carving out more time to do the work that matters most.

Let’s look back at the code and
communities built on GitHub this year...

Based on the data collection range of October 2019 - September 2020.

  • 56

    Million+

    total developers on
    GitHub

  • 72

    %

    of Fortune 50 companies
    use GitHub Enterprise

  • 60

    Million+

    new repositories created
    in the last year

  • 1.9

    Billion+

    contributions added
    in the last year

// The regions that scaled

Geographical distribution of active users

Oceania Africa South America Europe Asia North America
  • 34

    %

    North America

    Decrease of 2% from last year

  • 30

    .7%

    Asia

    Increase of 1.1% from last year

  • 26

    .8%

    Europe

    Increase of 0.1% from last year

  • 4.9

    %

    South America

    Increase of 0.4% from last year

  • 2

    %

    Africa

    Increase of 0.3% from last year

  • 1.7

    %

    Oceania

    No change since last year

// The languages that dominated

Top languages over the years

Ruby Objective-C Shell C C++ PHP C# TypeScript Java Python JavaScript 2 4 8 6 10 2014 2016 2018 2020 Ranking

This year we did a deeper dive into the patterns that we see on GitHub.

// Explore each section of our report

// Part 1 of 3

Finding balance
between work and play

In 2020 we all had to rethink our working spaces and schedules, testing the boundaries between work and home—and we saw that line can be hard to draw.

Governmental responses to COVID-19 had a clear effect on working from home across all regions.

While developers have been putting in longer working hours, they’ve also spent more time on open source projects.

/#chart-public-oss-creation

Percent increase in open source project creation per active user compared to previous year

Seven day rolling average

11.2019 01.2020 03.2020 05.2020 07.2020 09.2020 -20% 0% 20% 40% 60% COVID-19 lockdown

We saw a major spike in activity in March and April when the COVID-19 pandemic began to take shape.

Developer work dropped on the weekends, while open source activity jumped.

This could mean that open source is both a place to learn and create, and an important escape from work.

See how people worked this year

/#chart-work-span-day

Average development window by day of week per user

Percentage of all contributions that are to open source repos overlaid

Mon Tue Wed Thu Fri Sat Sun 0 0% 100 3% 200 5% 300 8% 400 2019 2020 OSS contributions 10% 13% Average work day (min) % of all contributions that are to OSS repos

We measured time between first and last push to main branch to capture development time - which is higher this year vs last (bars).

  • 35

    %

    more repositories
    created than last year

  • 25

    %

    more contributions to
    open source projects

  • 7.5

    HRS

    faster pull request merge times in teams' most productive and collaborative weeks

Person deep in thought, wearing headphones, looking at laptop screen
Picture of work and parenting happening from home

It's unclear if developers are taking advantage of flexible work schedules,or stretching the same amount of work over longer periods of time. However in some cases, work volume increases.

In a time when everyone is forced to stay home, developers around the world have found connection and community through open source.

While many caution that technology can be tiring, these patterns show that open source may provide a creative outlet that’s noticeably different from the workplace.

Explore work patterns across regions

Over the course of a year, we’ve seen GitHub grow globally in size and diversity. And it’s not just numbers: The kinds of projects and skills of contributors are expanding.

Top countries and regions percentage growth in contributors since last year

Hong Kong (SAR) 64.5% Nigeria 65.9% Pakistan 51.5% Indonesia 51.2% Saudi Arabia 60.1% Turkey 49.4% Bangladesh 59.5% Colombia 48.0% Egypt 54.9% Peru 47.8% 1 2 3 4 5 6 7 8 9 10

01

Timely Open Source for Good projects, like COVID-19, saw explosive growth and may present an exciting opportunity for new users to get engaged in open source communities.

No.
Topic
Repositories
1
COVID-19
5,646
2
dataworkshop
1,008
3
angular9
753
4
bsa
560
5
vercel
557

02

Data analysts, scientists, students, teachers, and designers are joining GitHub, suggesting that collaborations on the platform will increasingly include more than just code.

Students and teachers 23%
Data analysts 10%
Scientists 6%
Designers 5%
Managers 3%

03

Using GitHub as a platform for education creates long-term careers in software development and opens opportunities to impact lives around the world.

  • 73

    %

    more active teachers

  • 32

    %

    more active students

// Part 2 of 3

Empowering
healthy communities

As communities see more activity, it's more important than ever to fight burnout. Early feature adoption gives developers space for connection and collaboration so everyone can focus on the work that matters most.

Launched in May of 2020, GitHub Discussions found early success during next.js’s beta test.

3000

Discussions started in
the next.js repository

50

%

of active Discussions users
have contributed/ pushed code

With GitHub Discussions, the community can share context and expertise without burdening maintainers and key champions.

People value the ability to separate conversations from work, while still sharing a common platform.

/#chart-next-js

Cumulative Discussions created over time in next.js

01.2020 03.2020 05.2020 07.2020 09.2020 0 1000 2000 4000 3000 Number of Discussions

Discussions also increased retention of new community members.

New members were more likely to return if they participated in a Discussion than if they pushed a commit or created an issue, and Discussions are more sustainable for the community.

Learn how teams use Discussions

/#chart-retention-contribution

Retention rate based on newcomer's first contribution

First contribution must have been within 28 days of creating an account. Retained is defined as a contribution in second 28 day window.

comment on commit create gist create issue push review pull request create pull request create team discussion comment on pull request comment on discussion 0% 0 20% 50,000 40% 100,000 60% 150,000 80% 200,000 250,000 24% 26% 69% 38% 47% 23% 68% 49% 73% retention rate newcomer Retention rate Number of newcomers

Most of my work as an engineering manager has been teaching people how to scope work to smaller bits. So any time you have a big honking PR it's a nightmare to review—either too much discussion or none because no one can get their head around it.”
Sarah Drasner VP Developer Experience,
Netlify

Open source communities also leveraged the value of automation.

Automation accelerates software delivery by helping teams automate their workflow, leaving more time to focus on the most critical work.

Open source projects that use GitHub Actions to automate their pull requests saw faster software delivery and better collaboration.

Learn how automation fuels developer experience and productivity

The patterns we learn about open source communication and automation can make enterprise teams more productive, too.

34

%

increase in the number of pull requests merged

18

%

decrease in time to merge

// Part 3 of 3

Securing
the world’s software

By incorporating automation into workflows, communities are making it easier and faster to identify and remediate vulnerabilities.

683

median transitive dependencies for npm followed by PHP (70), Ruby (68), and Python (19). All of which can become impacted by one security vulnerability.

59

%

chance of getting a security alert in the next year from an active repository with supported package ecosystems

Learn more about dependencies

/#chart-rely-on-oss

Percent of active repositories that rely on open source

0% PHP Java .NET Python Ruby JavaScript 25% 50% 75% 100% 88.5% 65.3% 94% 89.8% 80.6% 90.2%

Most projects on GitHub rely on open source software. This analysis included public open source repositories with at least one contribution in each month between 10.1.2019 and 09.30.2020.

A vulnerability can wreak havoc on your work and cause large-scale security issues. However, most vulnerabilities are actually from mistakes not malicious attacks.

17

%

of vulnerabilities were
explicitly malicious but
triggered just 0.2% of alerts

83

%

of remaining vulnerabilities are the result of mistakes

Bewildered man looking at computer screen with coffee in hand

By relying on open source when you can, your team benefits from all the fixes found and remediated by the community.

Time to remediate is an important component for all DevOps teams.

Learn how teams automate security

01

4

Years

Vulnerabilities go undetected before being identified

02

4.4

Weeks

for the community to code and release a fix after a vulnerability is identified

03

10

Weeks

to alert the community on the availability of a security update

04

1

Week

for users to apply the security update