"Quantifying Nebraska"

on YouTube ↗26m

" summary

Gives a concrete method for finding those tiny-but-critical projects rather than rehashing the trope: uses sift to generate an SBOM, correlates packages to repos and scorecards, and highlights surprises like 301 unique Python dependencies and the XZ backdoor case study. Shows what metrics actually matter (issue/PR triage rates, commit/maintainer ratios), gives tools to filter candidates, and lists practical responses — sponsor, donate engineer time for triage/reviews, or provide infrastructure credits.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 1:28XZ backdoor supply chain attack
3. 7:49Open source dependency stability
4. 9:12Evaluating project health
5. 15:14Human factors in sustainability
6. 20:53How to provide meaningful support to projects
7. 24:24Conclusion

" related talks

• 12mQuantifying NebraskaAdam Harvey · SupplyChainSecurityCon @ Open Source Summit North America 2024
• 36mPanel Discussion: OSS Viability and Project...Dawn M Foster, Gary White, Matt Germonprez, Emma Irwin · OSPOCon @ OSS NA 2024
• 26mBuilding & Supporting Open Source Communities Through MetricsGeorg Link, Emilio Galeano Gryciuk · Open Source Summit Latin America 2022
• 46mPanel Discussion: What Our OSPOs Have...Dawn M Foster, Alyssa P Wright, Sophia Vargas, Emma Irwin · OSPOCon @ Open Source Summit North America 2023
• 43mDon't Start Over, Start Left: Choosing the Right Open Source...Martin Hell · Open Source Summit Europe 2023
• 34mCommunity Data: What to Measure and Why?Cali Dolfi · Open Source Summit Europe 2022: Open AI + Data Forum
• 41mBuilding and Supporting Open Source Communities Through Metri...Georg Link, Emilio Galeano Gryciuk · Community Leadership Conference @ Open Source Summit Europe 2022
• 35mThe Benefits and Pitfalls of OSS Project Metrics: Measuring Health and Risk in Open Source CommunitiesSophia Vargas · Open Source in Finance Forum New York 2022