Time to Patch Statistics

In my security advisories I keep record of the time a vendor or open source project needed to provide a fix or patch for the vulnerability I reported (time to patch).

Here are some time to patch statistics of the vulnerabilities I reported:

Average time to patch:
(How long does it take to patch a vulnerability?)

Average time to patch: 99.9 days
Total number of vulnerabilities: 30

Time to patch for open source software projects:
(How long does it take open source projects to patch vulnerabilities?)

Average time to patch: 8.6 days
Total number of vulnerabilities: 12

Average time to patch for proprietary software:
(How long does it take commercial software vendors to patch vulnerabilities?)

Average time to patch: 160.8 days
Total number of vulnerabilities: 18