The Cathedral, the Bazaar, and the Coffeehouse
summary
Code audit claims 99% of codebases contain open source, 82% include outdated or abandoned components, and 73% show license issues; GitHub-sized data cites about 54 million projects and 14 million active developers giving roughly four projects per developer. Recommended actions include creating an Open Source Program Office to audit and firewall dependencies, hiring or funding upstream maintainers, donating build/storage resources, applying CHAOSS and Apache Kibble metrics, and forming cross-company “coffeehouse” OSPO coalitions to share analysis and split maintenance work.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:16Speaker introduction and historical context
- 3:43Lloyd's Coffee House risks
- 7:01Open source dependency risks
- 12:03Cathedral vs bazaar models
- 14:49Coffeehouse model proposal
- 15:35Open source risk strategies
- 19:48Supporting open source foundations
- 21:55Inner source solutions
- 23:20Summary
related talks
33mThe Cathedral, the Bazaar, and the Coffee House
05mThe Cathedral, The Bazaar and the Coffee House
39mSOS: Sustainable Open Source
47mThe TRUE Cost of Open Source
16mKeynote: Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software
01h 01mWe're Building On Hollowed Foundations (...)
36mSOS Sustainable Open Source
41mManaging the risk and growth of using Open Source Software