Panel: Open Source Management Based on Open Source
Panelat Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025 · 2025-12-08..12-10·
summary
Companies adopt the OpenChain spec as a high‑level governance blueprint, build continuous compliance by turning policies into automated checks, and prefer modular tooling to avoid vendor lock‑in—mixing ScanCode/Fossology for detection, CycloneDX/SPDX SBOMs and Dependency-Track for vulnerability matching. Teams measure impact through community feedback and usage signals (GitHub stars, event engagement), push translations and training for adoption, and treat tooling like Lego pieces so processes can change without changing outcomes.
AI-written summary · about
chapters (9)
- 0:00Open source management panel
- 2:26Panelists' backgrounds
- 5:55Open source governance
- 13:09Effective open source tools
- 20:58Compliance and security solutions
- 28:28Measuring open source impact
- 34:39Corporate governance lessons
- 36:03Q&A: smaller companies
- 37:29Q&A: community influence
related talks
39mComplex Made Simple
28mGoverning Open Source in the Enterprise: OSPO Strategies for Innovation and Compliance
42mOpen Source Compliance Management - Removing the Thorn from...
16mOpen Source Consumption/ Adoption Manifesto
31mOpenChain’s Strategic Direction for 2027 in Global Practices
40mThree Cs to an Open Source Program Office
18mKeynote: Collaboration Beyond Code
45mFostering an Open Environment for Developers in a Regulated Industry