Jeff McAffer from Microsoft presented on the topic of "Open Source at Scale" at the Open Compliance Summit 2018. This is an excellent presentation covering how massively complex open source use cases can be addressed.

1. Open source @ scale
Jeff McAffer
Director of Open Source Programs Office, Microsoft
@jeffmcaffer

2. Aspiring to world class is not enough,
when everyone else starts there

3. So we joined in
1,000,000s 100,000s
20,000 8,500
1,000s
1,000s

4. Anything >1000 is hard to manage

5. Compliance @ scale

6. Lots of policies and processes

7. Pessimistic

8. Optimistic

9. Thee part strategy
60 20000
20 <5
100 0.5

10. Compliance
Notices
Source disclosure
Support in the dev lifecycle
Assess components
Visual Studio Extension
VS Code Extension
Browser
Component Ingest
Source
Binary
Analyze
Component Build
Policy
Support
Detectors
Binary/Package
Source
Build Integration
Registration
IP Review
IP Scan
Security
Validation
IP Review
IP Scan
Security
Ongoing
Freshness
Vulnerabilities

11. Demo

12. ClearlyDefined
Curate
Upstream
Harvest

13. Data is key!
Uses
IP
Security
Health
Repo
Product
Org

14. Policies and process

15. Automation

16. Questions?
opensource.microsoft.com
jmcaffer@microsoft.com
@jeffmcaffer