Open Source Summit Europe 2022

Open Source Software (OSS) makes up a pivotal part of today's digital infrastructure. Like roads and bridges, the digital infrastructure requires continuous maintenance to avoid cracks and bumps that, in turn, can cause severe effects. Such maintenance, however, can not be taken for granted. Companies need to be aware of what OSS is used, or considered in the intake process. But what should one look for, and how? What can be done to mitigate, or address the risk of cracks and bumps arising? In this talk, Johan will answer these questions based on ongoing empirical research, as well as experience from the industry. More specifically, Johan will present how companies can analyze the health of the OSS projects, i.e., their ability to stay viable long-term and maintain the OSS. By analyzing the health, (potential) users of the OSS can evaluate whether to use or continue using the OSS. It can also enable them to proactively improve the health of an OSS project and thereby lowering the risk of vulnerabilities being introduced. The audience will be provided with practical examples of what aspects to consider to analyze health based on context and risk, how to set up a screening process, and how to work proactively in improving the health and sustainability of the OSS used.