Cyberstats

Security Intelligence

VendorsEndor Labs

Endor Labs

Cybersecurity reports and statistics published by Endor Labs

8 categories1 reports

Research Reports

Reports and publications from Endor Labs

State of Dependency Management 2025: Security in the AI-Code Era

Recent Statistics & Reports

40% of the more than 10,000 Model Context Protocol (MCP) servers created in under a year had no license in 2025.

MCP Ecosystem Software Development Security Risks

The proportion of safe dependency recommendations increased from 20% to 57% when AI agents were equipped with security tools in 2025.

AI coding agent AI Development Software Vulnerabilities

44-49% of dependencies imported by AI coding agents contained known security vulnerabilities in 2025.

AI coding agent AI Development Dependency Management

82% of the more than 10,000 Model Context Protocol (MCP) servers interact with sensitive APIs, creating additional vulnerabilities in 2025.

MCP Ecosystem Software Development Security Risks

Only 20% of dependency versions recommended by AI coding assistants were found to be safe to use in 2025.

AI coding agent AI Development Software Vulnerabilities

About 75% of the more than 10,000 Model Context Protocol (MCP) servers were built by individuals without enterprise-grade protections in 2025.

MCP Ecosystem Software Development Security Risks

Top Categories

3

Software Development

3

3

AI coding agent

3

3

Software Vulnerabilities

2

Dependency Management

1

Related Vendors