Fannie Mae OSPO Journey
summary
OSPO forms in 2021 and builds an InnerSource program that delivers 74 consultations, automates SBOMs with Tidelift, and registers practical governance and inventory workflows; teams publish two open projects: the Clean Dependency Project (patches for pandas pickling released to PyPI and Maven Central) and Metrostop interactive graphing; internal outcomes show 116 PRs merged, a portal with ~20,000 hits and 500 vulnerabilities remediated inside the house while a six‑person core team coordinates intake and compliance.
AI-written summary · about
chapters (18)
- 0:00Fannie Mae's OSPO journey
- 3:33Regulation vs open source
- 4:58OSPO founding pillars
- 6:24Breaking silos
- 7:25Inner source benefits
- 9:09Tech stack and versioning
- 10:11Compliance and risk strategies
- 11:35First open source release
- 12:39Clean dependency project
- 14:45Metro stop project
- 16:10Future of contributions
- 17:59Open source standard
- 18:19Culture transformation
- 21:27Special interest groups and collaboration
- 23:56Partnerships with foundations
- 25:21Lessons learned
- 27:49Next steps
- 28:53Q&A
related talks
30mOSPOs in Finance: Ways to Overcome Industry Barriers to Accelerate OS Adap...
34mThe Role of OSPO Manager for the Organization’s Success
46mOSS Management & OSPO Ask Anything
34mSupply Chain Security, SBOMs and How OSPOs Can Play An Important Role Going Forward - An Ecosystem and Compliance Update
26mOpen Source Program Offices
28mGoverning Open Source in the Enterprise: OSPO Strategies for Innovation and Compliance
26mNavigating Open Source: Establishing an OSPO for Organizational Success
30mDemystifying OSPOs