SOS: Sustainable Open Source
summary
Explains why recent license shifts (Commons Clause, SSPL, BSL, AGPL) and ethical licenses push companies and communities to fork or abandon projects, cites concrete incidents: left-pad removal broke thousands of builds, maintainer sabotage of colors/faker and node-ipc, and the Log4j CVE 10/10 crisis; notes metrics: an average npm install pulls in 79 third-party packages and 39 maintainers, and recommends practical responses — track licenses/SBOMs, fund or hire critical maintainers, and use OSPOs and tooling to monitor project health.
AI-written summary · about
chapters (7)
- 0:00Introduction to SOS
- 1:50Licensing issues in open source
- 9:21Cloud vendor restrictions debate
- 16:38Risks of poorly maintained dependencies
- 23:19Securing open source supply chains
- 28:21How individuals can help
- 31:54Q&A and conclusion
related talks
39mSOS: Sustainable Open Source
36mSOS Sustainable Open Source
34mWhen Your Open Source Turns to the Dark Side
30mOpen Source Licensing: Use Versus Abuse
33mThe Cathedral, the Bazaar, and the Coffee House
01h 38mOpen Source Licensing: Types, Strategies and Compliance
45mto be defined
25mWhat Makes Open Source Work: Licensing and Beyond