Towards a sustainable solution to open source sustainability
summary
Heartbleed/OpenSSL exposes a sustainability crisis: a 2014 bug leaks ~4.5M patient records and costs ~$500M while core crypto was maintained by one maintainer on $2k/year. Industry responses range from the Linux Foundation’s Core Infrastructure Initiative to Patreon-style patronage, Gitcoin bounties (~$500k paid 2018), Open Collective (~$1M 2018), and Tidelift’s paid-maintainer model. Back-of-envelope math (about 20M developers ≈ $1T labor) shows charity won’t scale; the effective path is normalizing company-paid engineering time as ROI-driven contribution.
AI-written summary · about
chapters (5)
- 0:00Introduction and Heartbleed impact
- 3:38Industry responses to sustainability
- 11:25Challenges of funding models
- 17:25Redefining open source value
- 20:58Normalizing contributions
related talks
01h 01mWe're Building On Hollowed Foundations (...)
23mConsumption Is Fractal: Open Source...
14mWhat can we do to make Open Source more sustainable?
26mTrapped in the Open Source Supply Chain
46m1 Billion Dollars for Open Source Maintainers
30mThe Real Costs of Open Source Sustainability
41mThe real costs of Open Source Sustainability
42mBuilding Resilience: The Next Decade of Open Source