Some Trends

I've started filling in the matrix of effectiveness discussed two weeks ago. One of the most telling items is the MITRE CVE list of vulnerabilities. They list 3 vulnerabilities that are relevant to Plone version 2.5, all of them of medium severity. (3.0.1 is too recent to have any meaningful data--they list no vulnerabilities.) By comparison Drupal has 73(!), SharePoint has 12 (5 of them of high severity), and Mambo has 122(!).

Additionally, I plotted the dates of the significant releases to come up with this graphic. It shows a remarkably steady trend of evenly spaced releases. The ticks on the x-axis are approx. 6 months apart. Tip o' the hat to all the developers who make this happen.



Of course, the big upward jumps are major releases and I've been so presumptuous as to put in a trendline. If 3.5 comes out next July, it will be well ahead of the regression model.