In From the Cold - Open Source as Part of Mainstream Software Asset Management
summary
Open source moves from fringe to mainstream software asset management with concrete artifacts: SPDX (2010) and SPDX3, ISO standards like ISO/IEC 5230, 18974 and 5962, an OpenChain library of 1,500 assets, a 25‑company board, and a CC0 maturity model. Data points show systemic problems (over 50% compliance and 80% security flags in one 2022 scan) that these tools and process guides, plus ESBOM/AI SBOM work and procurement/M&A playbooks, are already addressing to make open source manageable.
AI-written summary · about
chapters (9)
- 0:00Open source in SAM
- 2:30Supply chain challenges
- 7:06OpenChain process & ISO
- 11:02Open source vs SAM
- 14:15OpenChain resources & AI
- 17:03Convergence of open source & SAM
- 20:11OpenChain for convergence
- 23:04Challenges in open source
- 24:10Q&A
related talks
31mOperationalizing Open Source Projects: When the Rubber Meets the Road
15mFrom Code to Market: Strategic Business Models and OSPO Implementation
40mThree Cs to an Open Source Program Office
40mHow Can Your OSPO Drive Open Source Business Value for Your Organization?
40mHow to Open Source a Project and Possibly Not Fail While Trying
46mLessons Learned from Organizations' Use of Open Source
23mBest Practice in Delivering Successful Open Source Engagement in Organisations
26mNavigating Open Source: Establishing an OSPO for Organizational Success