SlideShare a Scribd company logo
Guide to Open Source
Javier Perez
@jperezp_bos
Oct. 2018
Open Source Accelerating
GitHub Stats 2017
Top Open Source projects
Source: TechCrunch https://techcrunch.com/2017/04/07/tracking-the-explosive-growth-of-open-source-software/
GitHub cofounder Tom Preston-Werner
• Force multiplier
• Modular and documented
• Reduce duplication of effort
• Great advertising
• Attract talent
• Best technical interview possible
Other quotes about Open source
Not commonly associated with Open Source
• Adobe
• 273 GitHub repos, Cordova/PhoneGap http://opensource.adobe.com/
• Netflix
• All open, video streaming, build and deploy services to cloud elasticity, runtimes,
microservices http://netflix.github.io/
• Oracle
• Java, MySQL and OpenOffice. Supports the Linux Foundation, the Eclipse Foundation
and the OpenStack Foundation https://developer.oracle.com/opensource
• Samsung
• Only Intel and Red Hat have made more open source contributions to the Linux kernel
• Software for TVs, digital cameras, mobile phones and even smart refrigerators
• http://opensource.samsung.com/reception.do
• Microsoft
• Three years ago Microsoft decided to make open source pervasive throughout the
company and rolled open source into the main engineering groups. Everything is
published in GitHub and https://opensource.microsoft.com/
• In 2017 ~1,300 employees actively pushing code to 825 top repositories
Not commonly associated with Open Source
Top Org/Contributors to Open Source
Open Source
More than simply free “published” code
How to launch and Open Source project?
1. Open source license
2. README
3. Contribution guidelines
4. Code of conduct
1. Open Source License
• Every Open Source Software (OSS) needs a license file
• No license file means that it is not open source
• How much license reciprocity is required?
• What legal jurisdiction cover the license?
• GNU Project and Open Source Initiative with 100s of license types
• Most commonly used for open and free distribution: Apache or MIT
2. README file
• Good development practice
• More than how to use the project:
• What does the project do?
• Why is this project useful?
• How do I get started?
• Where can I get more help?
3. Contribution guidelines
• Add CONTRIBUTING file
• Tell the audience how to participate in your project
• How to file a bug report (GitHub issues and pull requests)
• How to suggest a new feature
• How to setup your environment and run tests
• Types of contributions you are looking for
• Vision and roadmap
• Mailing lists, even public JIRA
4. Code of conduct
• CODE_OF_CONDUCT file
• Where the code of conduct takes effect
• Whom the code of conduct applies to
• What happens if someone violates the code of conduct
• How to report violations
• Examples of unacceptable behavior by participants include:
• The use of sexualized language or imagery
• Personal attacks
• Trolling or insulting/derogatory comments
• Public or private harassment
• Publishing other's private information, such as physical or electronic addresses,
without explicit permission
• Other unethical or unprofessional conduct.
Roles in an Open Source project
• Maintainer
• ”Owner” and administrator, publish code, website, social media
• Committer
• Becoming a Committer in projects like Cordova, Node.js, Linux and others is a highly
regarded and respected role.
• Contributor
• Opportunity to learn, join a community and meet people.
• Users
Contribute to Projects
• Either company sponsored or individually
• It is called to “contribute upstream”
• When a company uses OSS if it does not contribute back upstream
their fixes or enhancements are left out. This drives high
maintenance cost
What not to Open Source
• Keys and credentials
• Customer data
• Employee data
• Patented intellectual property
• Code owned by other companies or entities (unless it is open source)
Open Source Foundations
• To collaborate and attract collaboration
• Independent and neutral body to promote project grow
• Legal guidance
• Examples:
• The Apache Software Foundation
• The Software Freedom Conservancy
• The Linux Foundation
• The Eclipse Foundation
• The Cloud Native Computing Foundation
• The OpenStack Foundation
• The Free Software Foundation
• The Open Source Initiative
• .NET Foundation
• Node.js Foundation
Open Source Business Models
• Product Support and Services Subscription model
• Software available for free, customers pay for productized version, support
and services
• From OSS projects to Products (commercialized)
https://redhatofficial.github.io
Open Source Business Models
• Pay for Additional features model
• Similar to in-app purchases on mobile apps
• OSS to keep growing the project and community
• Charge for advanced features and services
• Does not attract many contributors
 Support
 Admin tools
 Advanced security
 Advanced analytics
 Data viewer tool
 In-memory storage engine
 Integrations
 Commercial license
 Platform certification, training and
customer success program
Open Source Business Models
• Software as a Service model
• One of the most popular models now
• Hosting in the cloud, charging for the service
• No Capex for customers, up and running in minutes
Open Source Business Models
• Partnerships
• Keep it open and commercialize to partners that need the technology
• Offer a supported version to partners
• Mozilla Firefox gets paid by partners Yahoo, Amazon and Google for built-in
search
• Donations
• Wikipedia, and others
Build products and platforms with OSS
• Easier now with more open source components and libraries
• Easier now with APIs, microservices, all in container images
Why businesses are adopting OSS?
• To start for free or at a very low cost
• Use of the latest innovations
• Faster pace of bugs and vulnerabilities fixes
• Many options and many sources of support via documentation,
community forums/portals, videos and blog posts
• The power of working together, makes better OSS
• Developers are becoming full stack developers. Open source stacks
(MEAN, LAMP, others)
• Easier to recruit developers
It is time to open source
• We want to attract more developer users and employees
• We want to grow our community of users and contributors
• More open source tooling, integrations and plugins create stickiness
in the products
• Open source promotes improvement on architecture and coding
practices
Recommendations (1/4)
• Create a public GitHub Space (can also subscribe to a Business plan)
• Publish independent not core components
• Integrations and plugins
• Invite customers and developers to contribute (act as a maintainer)
• Take releases from GitHub repos
• Apply QA and QE
• Handover to Support
• Provide documentation
Recommendations (2/4)
• Monolithic to Microservices provides an opportunity to develop in the
open basic functions:
• Sign on, role based user management, monitoring, testing scripts
• Tools, scripts and CLIs currently in private repos
• Opportunity to showcase employees’ code, ideas and innovations
Recommendations (3/4)
• Target persona is developers
• Many organizations have now websites dedicated to developers
• https://developer.walmart.com
• https://developer.ibm.com/open/
• https://developer.twitter.com/
• Create developers.companyname.com, a place to find all technical
and developer-oriented information about your open source projects,
APIs and products.
Recommendations (4/4)
• Embrace open source app sec projects, don’t see them as threats or
competitors
• Find OSS that can complement and enhance your offering
• Build on top of OSS and contribute back
• Join a Foundation
Final Thought
Thank you
Javier Perez
@jperezp_bos
Ad

More Related Content

What's hot (20)

OSGeo Incubation 2014
OSGeo Incubation 2014OSGeo Incubation 2014
OSGeo Incubation 2014
Jody Garnett
 
Summit 16: The Practice of Building OPNFV User Group in China
Summit 16: The Practice of Building OPNFV User Group in ChinaSummit 16: The Practice of Building OPNFV User Group in China
Summit 16: The Practice of Building OPNFV User Group in China
OPNFV
 
Collaborating on GitHub for Open Source Documentation
Collaborating on GitHub for Open Source DocumentationCollaborating on GitHub for Open Source Documentation
Collaborating on GitHub for Open Source Documentation
Anne Gentle
 
Docs Like Code: Strategies and Stories
Docs Like Code: Strategies and StoriesDocs Like Code: Strategies and Stories
Docs Like Code: Strategies and Stories
Anne Gentle
 
How to "Hack" the DSpace Community
How to "Hack" the DSpace CommunityHow to "Hack" the DSpace Community
How to "Hack" the DSpace Community
Tim Donohue
 
Eclipse e4
Eclipse e4Eclipse e4
Eclipse e4
Chris Aniszczyk
 
Community Repositories: Why You Need One for Your Open Source Project
Community Repositories: Why You Need One for Your Open Source ProjectCommunity Repositories: Why You Need One for Your Open Source Project
Community Repositories: Why You Need One for Your Open Source Project
All Things Open
 
The Apache Way - Dataworks Summit 2017
The Apache Way - Dataworks Summit 2017The Apache Way - Dataworks Summit 2017
The Apache Way - Dataworks Summit 2017
Brett Porter
 
What every successful open source project needs
What every successful open source project needsWhat every successful open source project needs
What every successful open source project needs
Steven Francia
 
Open source
Open sourceOpen source
Open source
Ah Fawad Saiq
 
UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...
UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...
UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...
UKSG: connecting the knowledge community
 
Introduction to Open Source, Apache and Apache Way
Introduction to Open Source, Apache and Apache WayIntroduction to Open Source, Apache and Apache Way
Introduction to Open Source, Apache and Apache Way
Srinath Perera
 
The Apache Way
The Apache WayThe Apache Way
The Apache Way
Evans Ye
 
Embracing OSS in the enterprise
Embracing OSS in the enterpriseEmbracing OSS in the enterprise
Embracing OSS in the enterprise
cyberzeddk
 
Looking Ahead: AtoM's governance, development, and future
Looking Ahead: AtoM's governance, development, and futureLooking Ahead: AtoM's governance, development, and future
Looking Ahead: AtoM's governance, development, and future
Artefactual Systems - AtoM
 
Scale14x Patterns and Practices for Open Source Project Success
Scale14x Patterns and Practices for Open Source Project SuccessScale14x Patterns and Practices for Open Source Project Success
Scale14x Patterns and Practices for Open Source Project Success
Stephen Walli
 
RA21 Charleston Library Conference Presentation
RA21 Charleston Library Conference Presentation RA21 Charleston Library Conference Presentation
RA21 Charleston Library Conference Presentation
National Information Standards Organization (NISO)
 
. Design Decisions: Developing for Mobile - The Template Experience Project
. Design Decisions: Developing for Mobile - The Template Experience Project. Design Decisions: Developing for Mobile - The Template Experience Project
. Design Decisions: Developing for Mobile - The Template Experience Project
Gabriella Davis
 
Build social apps for Facebook
Build social apps for FacebookBuild social apps for Facebook
Build social apps for Facebook
Mohammad Emran Hasan
 
Successfully Profiting From Apache Brands
Successfully Profiting From Apache BrandsSuccessfully Profiting From Apache Brands
Successfully Profiting From Apache Brands
Shane Curcuru
 
OSGeo Incubation 2014
OSGeo Incubation 2014OSGeo Incubation 2014
OSGeo Incubation 2014
Jody Garnett
 
Summit 16: The Practice of Building OPNFV User Group in China
Summit 16: The Practice of Building OPNFV User Group in ChinaSummit 16: The Practice of Building OPNFV User Group in China
Summit 16: The Practice of Building OPNFV User Group in China
OPNFV
 
Collaborating on GitHub for Open Source Documentation
Collaborating on GitHub for Open Source DocumentationCollaborating on GitHub for Open Source Documentation
Collaborating on GitHub for Open Source Documentation
Anne Gentle
 
Docs Like Code: Strategies and Stories
Docs Like Code: Strategies and StoriesDocs Like Code: Strategies and Stories
Docs Like Code: Strategies and Stories
Anne Gentle
 
How to "Hack" the DSpace Community
How to "Hack" the DSpace CommunityHow to "Hack" the DSpace Community
How to "Hack" the DSpace Community
Tim Donohue
 
Community Repositories: Why You Need One for Your Open Source Project
Community Repositories: Why You Need One for Your Open Source ProjectCommunity Repositories: Why You Need One for Your Open Source Project
Community Repositories: Why You Need One for Your Open Source Project
All Things Open
 
The Apache Way - Dataworks Summit 2017
The Apache Way - Dataworks Summit 2017The Apache Way - Dataworks Summit 2017
The Apache Way - Dataworks Summit 2017
Brett Porter
 
What every successful open source project needs
What every successful open source project needsWhat every successful open source project needs
What every successful open source project needs
Steven Francia
 
UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...
UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...
UKSG webinar: Authentication technology update: RA21 and OpenAthens with Josh...
UKSG: connecting the knowledge community
 
Introduction to Open Source, Apache and Apache Way
Introduction to Open Source, Apache and Apache WayIntroduction to Open Source, Apache and Apache Way
Introduction to Open Source, Apache and Apache Way
Srinath Perera
 
The Apache Way
The Apache WayThe Apache Way
The Apache Way
Evans Ye
 
Embracing OSS in the enterprise
Embracing OSS in the enterpriseEmbracing OSS in the enterprise
Embracing OSS in the enterprise
cyberzeddk
 
Looking Ahead: AtoM's governance, development, and future
Looking Ahead: AtoM's governance, development, and futureLooking Ahead: AtoM's governance, development, and future
Looking Ahead: AtoM's governance, development, and future
Artefactual Systems - AtoM
 
Scale14x Patterns and Practices for Open Source Project Success
Scale14x Patterns and Practices for Open Source Project SuccessScale14x Patterns and Practices for Open Source Project Success
Scale14x Patterns and Practices for Open Source Project Success
Stephen Walli
 
. Design Decisions: Developing for Mobile - The Template Experience Project
. Design Decisions: Developing for Mobile - The Template Experience Project. Design Decisions: Developing for Mobile - The Template Experience Project
. Design Decisions: Developing for Mobile - The Template Experience Project
Gabriella Davis
 
Successfully Profiting From Apache Brands
Successfully Profiting From Apache BrandsSuccessfully Profiting From Apache Brands
Successfully Profiting From Apache Brands
Shane Curcuru
 

Similar to Guide to open source (20)

Créer une communauté open source: pourquoi ? comment ?
Créer une communauté open source: pourquoi ? comment ?Créer une communauté open source: pourquoi ? comment ?
Créer une communauté open source: pourquoi ? comment ?
Stefane Fermigier
 
Create great cncf user base from lessons learned from other open source com...
Create great cncf user base from   lessons learned from other open source com...Create great cncf user base from   lessons learned from other open source com...
Create great cncf user base from lessons learned from other open source com...
Krishna-Kumar
 
Code the docs-yu liu
Code the docs-yu liuCode the docs-yu liu
Code the docs-yu liu
StreamNative
 
Oscon 2016: open source lessons from the todo group
Oscon 2016: open source lessons from the todo groupOscon 2016: open source lessons from the todo group
Oscon 2016: open source lessons from the todo group
Ben VanEvery
 
CodeIgniter for Startups, cicon2010
CodeIgniter for Startups, cicon2010CodeIgniter for Startups, cicon2010
CodeIgniter for Startups, cicon2010
Joel Gascoigne
 
Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...
Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...
Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...
Lee Calcote
 
How to get started in Open Source!
How to get started in Open Source!How to get started in Open Source!
How to get started in Open Source!
Pradeep Singh
 
Open Source: What is It?
Open Source: What is It?Open Source: What is It?
Open Source: What is It?
DuraSpace
 
InnerSourcing - Worldwide enterprise development teams collaboration
InnerSourcing - Worldwide enterprise development teams collaborationInnerSourcing - Worldwide enterprise development teams collaboration
InnerSourcing - Worldwide enterprise development teams collaboration
Julian Werba
 
OpenChain at EOLE 2017
OpenChain at EOLE 2017OpenChain at EOLE 2017
OpenChain at EOLE 2017
Shane Coughlan
 
contributing to open source in just about any skill
contributing to open source in just about any skillcontributing to open source in just about any skill
contributing to open source in just about any skill
ssuser5bd894
 
But we're already open source! Why would I want to bring my code to Apache?
But we're already open source! Why would I want to bring my code to Apache?But we're already open source! Why would I want to bring my code to Apache?
But we're already open source! Why would I want to bring my code to Apache?
gagravarr
 
But We're Already Open Source! Why Would I Want To Bring My Code To Apache?
But We're Already Open Source! Why Would I Want To Bring My Code To Apache?But We're Already Open Source! Why Would I Want To Bring My Code To Apache?
But We're Already Open Source! Why Would I Want To Bring My Code To Apache?
gagravarr
 
OaaS:Open as a Strategy
OaaS:Open as a StrategyOaaS:Open as a Strategy
OaaS:Open as a Strategy
OpenCity Community
 
Techorama 2022 - Adventures of building Promitor, an open-source product
Techorama 2022 - Adventures of building Promitor, an open-source productTechorama 2022 - Adventures of building Promitor, an open-source product
Techorama 2022 - Adventures of building Promitor, an open-source product
Tom Kerkhove
 
Suguk Southampton CodePlex - March 2014
Suguk Southampton   CodePlex - March 2014Suguk Southampton   CodePlex - March 2014
Suguk Southampton CodePlex - March 2014
Steven Andrews
 
Contributing to Open Source Software
Contributing to Open Source SoftwareContributing to Open Source Software
Contributing to Open Source Software
Mike Lively
 
The Apache Way: A Proven Way Toward Success
The Apache Way: A Proven Way Toward SuccessThe Apache Way: A Proven Way Toward Success
The Apache Way: A Proven Way Toward Success
Evans Ye
 
How and Why you can and should Participate in Open Source Projects (AMIS, Sof...
How and Why you can and should Participate in Open Source Projects (AMIS, Sof...How and Why you can and should Participate in Open Source Projects (AMIS, Sof...
How and Why you can and should Participate in Open Source Projects (AMIS, Sof...
Lucas Jellema
 
9 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 15
9 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 159 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 15
9 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 15
Open API Initiative (OAI)
 
Créer une communauté open source: pourquoi ? comment ?
Créer une communauté open source: pourquoi ? comment ?Créer une communauté open source: pourquoi ? comment ?
Créer une communauté open source: pourquoi ? comment ?
Stefane Fermigier
 
Create great cncf user base from lessons learned from other open source com...
Create great cncf user base from   lessons learned from other open source com...Create great cncf user base from   lessons learned from other open source com...
Create great cncf user base from lessons learned from other open source com...
Krishna-Kumar
 
Code the docs-yu liu
Code the docs-yu liuCode the docs-yu liu
Code the docs-yu liu
StreamNative
 
Oscon 2016: open source lessons from the todo group
Oscon 2016: open source lessons from the todo groupOscon 2016: open source lessons from the todo group
Oscon 2016: open source lessons from the todo group
Ben VanEvery
 
CodeIgniter for Startups, cicon2010
CodeIgniter for Startups, cicon2010CodeIgniter for Startups, cicon2010
CodeIgniter for Startups, cicon2010
Joel Gascoigne
 
Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...
Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...
Create Great CNCF User-Base from Lessons Learned from Other Open Source Commu...
Lee Calcote
 
How to get started in Open Source!
How to get started in Open Source!How to get started in Open Source!
How to get started in Open Source!
Pradeep Singh
 
Open Source: What is It?
Open Source: What is It?Open Source: What is It?
Open Source: What is It?
DuraSpace
 
InnerSourcing - Worldwide enterprise development teams collaboration
InnerSourcing - Worldwide enterprise development teams collaborationInnerSourcing - Worldwide enterprise development teams collaboration
InnerSourcing - Worldwide enterprise development teams collaboration
Julian Werba
 
OpenChain at EOLE 2017
OpenChain at EOLE 2017OpenChain at EOLE 2017
OpenChain at EOLE 2017
Shane Coughlan
 
contributing to open source in just about any skill
contributing to open source in just about any skillcontributing to open source in just about any skill
contributing to open source in just about any skill
ssuser5bd894
 
But we're already open source! Why would I want to bring my code to Apache?
But we're already open source! Why would I want to bring my code to Apache?But we're already open source! Why would I want to bring my code to Apache?
But we're already open source! Why would I want to bring my code to Apache?
gagravarr
 
But We're Already Open Source! Why Would I Want To Bring My Code To Apache?
But We're Already Open Source! Why Would I Want To Bring My Code To Apache?But We're Already Open Source! Why Would I Want To Bring My Code To Apache?
But We're Already Open Source! Why Would I Want To Bring My Code To Apache?
gagravarr
 
Techorama 2022 - Adventures of building Promitor, an open-source product
Techorama 2022 - Adventures of building Promitor, an open-source productTechorama 2022 - Adventures of building Promitor, an open-source product
Techorama 2022 - Adventures of building Promitor, an open-source product
Tom Kerkhove
 
Suguk Southampton CodePlex - March 2014
Suguk Southampton   CodePlex - March 2014Suguk Southampton   CodePlex - March 2014
Suguk Southampton CodePlex - March 2014
Steven Andrews
 
Contributing to Open Source Software
Contributing to Open Source SoftwareContributing to Open Source Software
Contributing to Open Source Software
Mike Lively
 
The Apache Way: A Proven Way Toward Success
The Apache Way: A Proven Way Toward SuccessThe Apache Way: A Proven Way Toward Success
The Apache Way: A Proven Way Toward Success
Evans Ye
 
How and Why you can and should Participate in Open Source Projects (AMIS, Sof...
How and Why you can and should Participate in Open Source Projects (AMIS, Sof...How and Why you can and should Participate in Open Source Projects (AMIS, Sof...
How and Why you can and should Participate in Open Source Projects (AMIS, Sof...
Lucas Jellema
 
9 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 15
9 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 159 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 15
9 Months and Counting with Jeff Borek of IBM OpenAPI Meetup 2016 09 15
Open API Initiative (OAI)
 
Ad

More from Javier Perez (6)

Open Source Security and ChatGPT-Published.pdf
Open Source Security and ChatGPT-Published.pdfOpen Source Security and ChatGPT-Published.pdf
Open Source Security and ChatGPT-Published.pdf
Javier Perez
 
All Things Open 2022 - State of OSS Security & Support
All Things Open 2022 - State of OSS Security & SupportAll Things Open 2022 - State of OSS Security & Support
All Things Open 2022 - State of OSS Security & Support
Javier Perez
 
Open Source North - State of OSS in Organizations
Open Source North - State of OSS in OrganizationsOpen Source North - State of OSS in Organizations
Open Source North - State of OSS in Organizations
Javier Perez
 
Open source and AI keynote
Open source and AI keynoteOpen source and AI keynote
Open source and AI keynote
Javier Perez
 
SacHacks Keynote Open Source Software and IBM Z
SacHacks Keynote Open Source Software and IBM ZSacHacks Keynote Open Source Software and IBM Z
SacHacks Keynote Open Source Software and IBM Z
Javier Perez
 
All You need to Know about Secure Coding with Open Source Software
All You need to Know about Secure Coding with Open Source SoftwareAll You need to Know about Secure Coding with Open Source Software
All You need to Know about Secure Coding with Open Source Software
Javier Perez
 
Open Source Security and ChatGPT-Published.pdf
Open Source Security and ChatGPT-Published.pdfOpen Source Security and ChatGPT-Published.pdf
Open Source Security and ChatGPT-Published.pdf
Javier Perez
 
All Things Open 2022 - State of OSS Security & Support
All Things Open 2022 - State of OSS Security & SupportAll Things Open 2022 - State of OSS Security & Support
All Things Open 2022 - State of OSS Security & Support
Javier Perez
 
Open Source North - State of OSS in Organizations
Open Source North - State of OSS in OrganizationsOpen Source North - State of OSS in Organizations
Open Source North - State of OSS in Organizations
Javier Perez
 
Open source and AI keynote
Open source and AI keynoteOpen source and AI keynote
Open source and AI keynote
Javier Perez
 
SacHacks Keynote Open Source Software and IBM Z
SacHacks Keynote Open Source Software and IBM ZSacHacks Keynote Open Source Software and IBM Z
SacHacks Keynote Open Source Software and IBM Z
Javier Perez
 
All You need to Know about Secure Coding with Open Source Software
All You need to Know about Secure Coding with Open Source SoftwareAll You need to Know about Secure Coding with Open Source Software
All You need to Know about Secure Coding with Open Source Software
Javier Perez
 
Ad

Recently uploaded (20)

Exploring Code Comprehension in Scientific Programming: Preliminary Insight...
Exploring Code Comprehension  in Scientific Programming:  Preliminary Insight...Exploring Code Comprehension  in Scientific Programming:  Preliminary Insight...
Exploring Code Comprehension in Scientific Programming: Preliminary Insight...
University of Hawai‘i at Mānoa
 
Salesforce Aged Complex Org Revitalization Process .pdf
Salesforce Aged Complex Org Revitalization Process .pdfSalesforce Aged Complex Org Revitalization Process .pdf
Salesforce Aged Complex Org Revitalization Process .pdf
SRINIVASARAO PUSULURI
 
Designing AI-Powered APIs on Azure: Best Practices& Considerations
Designing AI-Powered APIs on Azure: Best Practices& ConsiderationsDesigning AI-Powered APIs on Azure: Best Practices& Considerations
Designing AI-Powered APIs on Azure: Best Practices& Considerations
Dinusha Kumarasiri
 
Kubernetes_101_Zero_to_Platform_Engineer.pptx
Kubernetes_101_Zero_to_Platform_Engineer.pptxKubernetes_101_Zero_to_Platform_Engineer.pptx
Kubernetes_101_Zero_to_Platform_Engineer.pptx
CloudScouts
 
Explaining GitHub Actions Failures with Large Language Models Challenges, In...
Explaining GitHub Actions Failures with Large Language Models Challenges, In...Explaining GitHub Actions Failures with Large Language Models Challenges, In...
Explaining GitHub Actions Failures with Large Language Models Challenges, In...
ssuserb14185
 
Top 10 Client Portal Software Solutions for 2025.docx
Top 10 Client Portal Software Solutions for 2025.docxTop 10 Client Portal Software Solutions for 2025.docx
Top 10 Client Portal Software Solutions for 2025.docx
Portli
 
Maxon CINEMA 4D 2025 Crack FREE Download LINK
Maxon CINEMA 4D 2025 Crack FREE Download LINKMaxon CINEMA 4D 2025 Crack FREE Download LINK
Maxon CINEMA 4D 2025 Crack FREE Download LINK
younisnoman75
 
Shift Left using Lean for Agile Software Development
Shift Left using Lean for Agile Software DevelopmentShift Left using Lean for Agile Software Development
Shift Left using Lean for Agile Software Development
SathyaShankar6
 
TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...
TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...
TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...
Andre Hora
 
How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...
How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...
How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...
Egor Kaleynik
 
Adobe Photoshop Lightroom CC 2025 Crack Latest Version
Adobe Photoshop Lightroom CC 2025 Crack Latest VersionAdobe Photoshop Lightroom CC 2025 Crack Latest Version
Adobe Photoshop Lightroom CC 2025 Crack Latest Version
usmanhidray
 
Revolutionizing Residential Wi-Fi PPT.pptx
Revolutionizing Residential Wi-Fi PPT.pptxRevolutionizing Residential Wi-Fi PPT.pptx
Revolutionizing Residential Wi-Fi PPT.pptx
nidhisingh691197
 
Mastering OOP: Understanding the Four Core Pillars
Mastering OOP: Understanding the Four Core PillarsMastering OOP: Understanding the Four Core Pillars
Mastering OOP: Understanding the Four Core Pillars
Marcel David
 
Adobe Lightroom Classic Crack FREE Latest link 2025
Adobe Lightroom Classic Crack FREE Latest link 2025Adobe Lightroom Classic Crack FREE Latest link 2025
Adobe Lightroom Classic Crack FREE Latest link 2025
kashifyounis067
 
Sales Deck SentinelOne Singularity Platform.pptx
Sales Deck SentinelOne Singularity Platform.pptxSales Deck SentinelOne Singularity Platform.pptx
Sales Deck SentinelOne Singularity Platform.pptx
EliandoLawnote
 
Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...
Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...
Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...
Eric D. Schabell
 
Download YouTube By Click 2025 Free Full Activated
Download YouTube By Click 2025 Free Full ActivatedDownload YouTube By Click 2025 Free Full Activated
Download YouTube By Click 2025 Free Full Activated
saniamalik72555
 
The Significance of Hardware in Information Systems.pdf
The Significance of Hardware in Information Systems.pdfThe Significance of Hardware in Information Systems.pdf
The Significance of Hardware in Information Systems.pdf
drewplanas10
 
FL Studio Producer Edition Crack 2025 Full Version
FL Studio Producer Edition Crack 2025 Full VersionFL Studio Producer Edition Crack 2025 Full Version
FL Studio Producer Edition Crack 2025 Full Version
tahirabibi60507
 
Secure Test Infrastructure: The Backbone of Trustworthy Software Development
Secure Test Infrastructure: The Backbone of Trustworthy Software DevelopmentSecure Test Infrastructure: The Backbone of Trustworthy Software Development
Secure Test Infrastructure: The Backbone of Trustworthy Software Development
Shubham Joshi
 
Exploring Code Comprehension in Scientific Programming: Preliminary Insight...
Exploring Code Comprehension  in Scientific Programming:  Preliminary Insight...Exploring Code Comprehension  in Scientific Programming:  Preliminary Insight...
Exploring Code Comprehension in Scientific Programming: Preliminary Insight...
University of Hawai‘i at Mānoa
 
Salesforce Aged Complex Org Revitalization Process .pdf
Salesforce Aged Complex Org Revitalization Process .pdfSalesforce Aged Complex Org Revitalization Process .pdf
Salesforce Aged Complex Org Revitalization Process .pdf
SRINIVASARAO PUSULURI
 
Designing AI-Powered APIs on Azure: Best Practices& Considerations
Designing AI-Powered APIs on Azure: Best Practices& ConsiderationsDesigning AI-Powered APIs on Azure: Best Practices& Considerations
Designing AI-Powered APIs on Azure: Best Practices& Considerations
Dinusha Kumarasiri
 
Kubernetes_101_Zero_to_Platform_Engineer.pptx
Kubernetes_101_Zero_to_Platform_Engineer.pptxKubernetes_101_Zero_to_Platform_Engineer.pptx
Kubernetes_101_Zero_to_Platform_Engineer.pptx
CloudScouts
 
Explaining GitHub Actions Failures with Large Language Models Challenges, In...
Explaining GitHub Actions Failures with Large Language Models Challenges, In...Explaining GitHub Actions Failures with Large Language Models Challenges, In...
Explaining GitHub Actions Failures with Large Language Models Challenges, In...
ssuserb14185
 
Top 10 Client Portal Software Solutions for 2025.docx
Top 10 Client Portal Software Solutions for 2025.docxTop 10 Client Portal Software Solutions for 2025.docx
Top 10 Client Portal Software Solutions for 2025.docx
Portli
 
Maxon CINEMA 4D 2025 Crack FREE Download LINK
Maxon CINEMA 4D 2025 Crack FREE Download LINKMaxon CINEMA 4D 2025 Crack FREE Download LINK
Maxon CINEMA 4D 2025 Crack FREE Download LINK
younisnoman75
 
Shift Left using Lean for Agile Software Development
Shift Left using Lean for Agile Software DevelopmentShift Left using Lean for Agile Software Development
Shift Left using Lean for Agile Software Development
SathyaShankar6
 
TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...
TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...
TestMigrationsInPy: A Dataset of Test Migrations from Unittest to Pytest (MSR...
Andre Hora
 
How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...
How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...
How Valletta helped healthcare SaaS to transform QA and compliance to grow wi...
Egor Kaleynik
 
Adobe Photoshop Lightroom CC 2025 Crack Latest Version
Adobe Photoshop Lightroom CC 2025 Crack Latest VersionAdobe Photoshop Lightroom CC 2025 Crack Latest Version
Adobe Photoshop Lightroom CC 2025 Crack Latest Version
usmanhidray
 
Revolutionizing Residential Wi-Fi PPT.pptx
Revolutionizing Residential Wi-Fi PPT.pptxRevolutionizing Residential Wi-Fi PPT.pptx
Revolutionizing Residential Wi-Fi PPT.pptx
nidhisingh691197
 
Mastering OOP: Understanding the Four Core Pillars
Mastering OOP: Understanding the Four Core PillarsMastering OOP: Understanding the Four Core Pillars
Mastering OOP: Understanding the Four Core Pillars
Marcel David
 
Adobe Lightroom Classic Crack FREE Latest link 2025
Adobe Lightroom Classic Crack FREE Latest link 2025Adobe Lightroom Classic Crack FREE Latest link 2025
Adobe Lightroom Classic Crack FREE Latest link 2025
kashifyounis067
 
Sales Deck SentinelOne Singularity Platform.pptx
Sales Deck SentinelOne Singularity Platform.pptxSales Deck SentinelOne Singularity Platform.pptx
Sales Deck SentinelOne Singularity Platform.pptx
EliandoLawnote
 
Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...
Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...
Mastering Fluent Bit: Ultimate Guide to Integrating Telemetry Pipelines with ...
Eric D. Schabell
 
Download YouTube By Click 2025 Free Full Activated
Download YouTube By Click 2025 Free Full ActivatedDownload YouTube By Click 2025 Free Full Activated
Download YouTube By Click 2025 Free Full Activated
saniamalik72555
 
The Significance of Hardware in Information Systems.pdf
The Significance of Hardware in Information Systems.pdfThe Significance of Hardware in Information Systems.pdf
The Significance of Hardware in Information Systems.pdf
drewplanas10
 
FL Studio Producer Edition Crack 2025 Full Version
FL Studio Producer Edition Crack 2025 Full VersionFL Studio Producer Edition Crack 2025 Full Version
FL Studio Producer Edition Crack 2025 Full Version
tahirabibi60507
 
Secure Test Infrastructure: The Backbone of Trustworthy Software Development
Secure Test Infrastructure: The Backbone of Trustworthy Software DevelopmentSecure Test Infrastructure: The Backbone of Trustworthy Software Development
Secure Test Infrastructure: The Backbone of Trustworthy Software Development
Shubham Joshi
 

Guide to open source

  • 1. Guide to Open Source Javier Perez @jperezp_bos Oct. 2018
  • 4. Top Open Source projects Source: TechCrunch https://techcrunch.com/2017/04/07/tracking-the-explosive-growth-of-open-source-software/
  • 5. GitHub cofounder Tom Preston-Werner • Force multiplier • Modular and documented • Reduce duplication of effort • Great advertising • Attract talent • Best technical interview possible
  • 6. Other quotes about Open source
  • 7. Not commonly associated with Open Source • Adobe • 273 GitHub repos, Cordova/PhoneGap http://opensource.adobe.com/ • Netflix • All open, video streaming, build and deploy services to cloud elasticity, runtimes, microservices http://netflix.github.io/ • Oracle • Java, MySQL and OpenOffice. Supports the Linux Foundation, the Eclipse Foundation and the OpenStack Foundation https://developer.oracle.com/opensource
  • 8. • Samsung • Only Intel and Red Hat have made more open source contributions to the Linux kernel • Software for TVs, digital cameras, mobile phones and even smart refrigerators • http://opensource.samsung.com/reception.do • Microsoft • Three years ago Microsoft decided to make open source pervasive throughout the company and rolled open source into the main engineering groups. Everything is published in GitHub and https://opensource.microsoft.com/ • In 2017 ~1,300 employees actively pushing code to 825 top repositories Not commonly associated with Open Source
  • 10. Open Source More than simply free “published” code
  • 11. How to launch and Open Source project? 1. Open source license 2. README 3. Contribution guidelines 4. Code of conduct
  • 12. 1. Open Source License • Every Open Source Software (OSS) needs a license file • No license file means that it is not open source • How much license reciprocity is required? • What legal jurisdiction cover the license? • GNU Project and Open Source Initiative with 100s of license types • Most commonly used for open and free distribution: Apache or MIT
  • 13. 2. README file • Good development practice • More than how to use the project: • What does the project do? • Why is this project useful? • How do I get started? • Where can I get more help?
  • 14. 3. Contribution guidelines • Add CONTRIBUTING file • Tell the audience how to participate in your project • How to file a bug report (GitHub issues and pull requests) • How to suggest a new feature • How to setup your environment and run tests • Types of contributions you are looking for • Vision and roadmap • Mailing lists, even public JIRA
  • 15. 4. Code of conduct • CODE_OF_CONDUCT file • Where the code of conduct takes effect • Whom the code of conduct applies to • What happens if someone violates the code of conduct • How to report violations • Examples of unacceptable behavior by participants include: • The use of sexualized language or imagery • Personal attacks • Trolling or insulting/derogatory comments • Public or private harassment • Publishing other's private information, such as physical or electronic addresses, without explicit permission • Other unethical or unprofessional conduct.
  • 16. Roles in an Open Source project • Maintainer • ”Owner” and administrator, publish code, website, social media • Committer • Becoming a Committer in projects like Cordova, Node.js, Linux and others is a highly regarded and respected role. • Contributor • Opportunity to learn, join a community and meet people. • Users
  • 17. Contribute to Projects • Either company sponsored or individually • It is called to “contribute upstream” • When a company uses OSS if it does not contribute back upstream their fixes or enhancements are left out. This drives high maintenance cost
  • 18. What not to Open Source • Keys and credentials • Customer data • Employee data • Patented intellectual property • Code owned by other companies or entities (unless it is open source)
  • 19. Open Source Foundations • To collaborate and attract collaboration • Independent and neutral body to promote project grow • Legal guidance • Examples: • The Apache Software Foundation • The Software Freedom Conservancy • The Linux Foundation • The Eclipse Foundation • The Cloud Native Computing Foundation • The OpenStack Foundation • The Free Software Foundation • The Open Source Initiative • .NET Foundation • Node.js Foundation
  • 20. Open Source Business Models • Product Support and Services Subscription model • Software available for free, customers pay for productized version, support and services • From OSS projects to Products (commercialized) https://redhatofficial.github.io
  • 21. Open Source Business Models • Pay for Additional features model • Similar to in-app purchases on mobile apps • OSS to keep growing the project and community • Charge for advanced features and services • Does not attract many contributors  Support  Admin tools  Advanced security  Advanced analytics  Data viewer tool  In-memory storage engine  Integrations  Commercial license  Platform certification, training and customer success program
  • 22. Open Source Business Models • Software as a Service model • One of the most popular models now • Hosting in the cloud, charging for the service • No Capex for customers, up and running in minutes
  • 23. Open Source Business Models • Partnerships • Keep it open and commercialize to partners that need the technology • Offer a supported version to partners • Mozilla Firefox gets paid by partners Yahoo, Amazon and Google for built-in search • Donations • Wikipedia, and others
  • 24. Build products and platforms with OSS • Easier now with more open source components and libraries • Easier now with APIs, microservices, all in container images
  • 25. Why businesses are adopting OSS? • To start for free or at a very low cost • Use of the latest innovations • Faster pace of bugs and vulnerabilities fixes • Many options and many sources of support via documentation, community forums/portals, videos and blog posts • The power of working together, makes better OSS • Developers are becoming full stack developers. Open source stacks (MEAN, LAMP, others) • Easier to recruit developers
  • 26. It is time to open source • We want to attract more developer users and employees • We want to grow our community of users and contributors • More open source tooling, integrations and plugins create stickiness in the products • Open source promotes improvement on architecture and coding practices
  • 27. Recommendations (1/4) • Create a public GitHub Space (can also subscribe to a Business plan) • Publish independent not core components • Integrations and plugins • Invite customers and developers to contribute (act as a maintainer) • Take releases from GitHub repos • Apply QA and QE • Handover to Support • Provide documentation
  • 28. Recommendations (2/4) • Monolithic to Microservices provides an opportunity to develop in the open basic functions: • Sign on, role based user management, monitoring, testing scripts • Tools, scripts and CLIs currently in private repos • Opportunity to showcase employees’ code, ideas and innovations
  • 29. Recommendations (3/4) • Target persona is developers • Many organizations have now websites dedicated to developers • https://developer.walmart.com • https://developer.ibm.com/open/ • https://developer.twitter.com/ • Create developers.companyname.com, a place to find all technical and developer-oriented information about your open source projects, APIs and products.
  • 30. Recommendations (4/4) • Embrace open source app sec projects, don’t see them as threats or competitors • Find OSS that can complement and enhance your offering • Build on top of OSS and contribute back • Join a Foundation

Editor's Notes

  • #5: Sonatype
  • #25: FeedHenry: Node.js, MongoDB, Redis, RabbitMQ, Docker, Kubernetes, OpenShift, Chef, Jenkins, Pingdom on AWS
  • #26: Elastic has the “ELK” stack, for example, consisting of the open-source Elasticsearch, Kibana and Logstash projects
  • #29: Netflix has been sharing their microservices, cloud elasticity scripts and orchestration technologies for years now, and has become a “magnet” to contributors and top-notch developers wanted to work at Netflix