Open Source Health:
A Practitioners Guide
Mike Milinkovich, Eclipse Foundation
@mmilinkov
Or how the quest for open source health has impacted the
Eclipse Foundation, its projects, and its community
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
“Never let the
facts get in the
way of a good
story.”
Software ate the world...
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
...then open source
gobbled up software
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Be Careful What You Wish For....
With great power
comes great
responsibility
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2002: Getting software to work (better)
Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Testing
▪ innovate with confidence
▪ tests run after each build
▪ test kinds
▪correctness tests
▪ assert correct behavior
▪performance tests
▪ assert no performance regressions
▪ based on a database of previous
test run measurements
▪resource tests, leak tests
▪ assert no resource consumption
regressions
Defect
s
Testing
Kent Beck – JUnit handbook
Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Unit Test Report
Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Performance Test Report
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2005: Is anyone using our stuff?
Early Days
5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 11
Welcome to eclipse.org
Eclipse is a kind of universal tool platform -
an open extensible IDE for anything and
nothing in particular.
Eclipse: A Leading Community
5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 12
2017 © Copyright Eclipse Foundation, Inc. THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Impacting a Market
13
2017 © Copyright Eclipse Foundation, Inc. THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Impacting a Market
14
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2005: Focus on Adopters
IP Policy
5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 16
Predictability
13-Apr-2016 17
Copyright (c) 2015, Eclipse Foundation, Inc. Made available under CC-BY-SA 4.0
Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
How is the Development Done?
milestones
first
API
first
end
game
retrospectives
always have
a client
built to
last
continuous
integration
community
involvement
new &
noteworthy
early incremental
planning
continuous
testing
consume your
own output
component
centric
drive with
open eyes
validate
reduce
stress
learn
enable
attract
to latest
transparency
validate
update
dynamic
teams
show progress
enable
explore
validate
Eclipse C/C++ Development Tools
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2006: Supporting an ecosystem
Copyright © 2008 Eclipse Foundation, Inc. All Rights Reserved. Made available under the Eclipse Public License 1.0
Platform == Architecture of Participation
“what really distinguishes open source is not just source, but an
"architecture of participation" ….”
Tim O’Reilly
http://www.oreillynet.com/pub/wlg/3017?wlg=yes
http://www.flickr.com/photos/sentience/261922677/
http://www.flickr.com/photos/ckindel/135426249/
Copyright © 2008 Eclipse Foundation, Inc. All Rights Reserved. Made available under the Eclipse Public License 1.0
The Eclipse Experience –
Architecture of Participation
Run-time
Plug-ins
Platform
New Plug-ins
are First Class
Citizens –
same footing
for everyone
Open API and
commercially
friendly licensing –
Low barriers to
Entry
Ease of Integration
and Extensibility
Spurs Innovation
Competition can take
place on implementations
– users decide winners
Successful Ecosystems are built on this model!
Eclipse Marketplace
● Catalog over 1000+
solutions
● Make it easy to find
Eclipse-based
products
● Anyone may list their
Eclipse product
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2007: Focus on Contributors
Contributions Abound
5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 25
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Eclipse Orion
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Eclipse IDE Platform
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Companies by Commits in 2021Q1
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2007: Basic Security
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2010: The emergence of Social Coding
aka The death of the self-hosted foundation forge
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
The impact of GitHub
Proposal
26-Mar-2013 Copyright (c) 2013, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 32
Contributions
& Patches
Git
Builds
Signing
Release &
Download
IPzilla & PMI
Contributions
& Patches
SCM
Bugzilla & Gerrit
Git clone of
main SCM
repos
Pull requests
Github
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2013: Social agency
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Code of Conduct
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2014: Long Term Sustainability
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Eclipse BIRT
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2017: Securing FLOSS
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2021: Supply Chain Security
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Reproducible Builds, Vulnerability
Scanning
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
c. 2021: Carbon Neutral Coding
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
The ever-growing and evolving
definition of “Health”
Early days… software that works
2004… Is anyone using our stuff?
2005… Focus on adopters
2006… Supporting an ecosystem
2007… Focus on contributors and contributor diversity (organization)
2007… Basic security
2010… Social coding a.k.a. the death of the forge
2013… Social agency, code of conduct, diversity initiatives
2014... Long term Sustainability (Heartbleed 2014)
2017… Security v2 - CVE issuing authority, security policy
2021… Supply Chain Security and Management
OpenChain, SPDX, reproducible builds, US Executive Order, Google blog post
2021 “Green” open source
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Summary
● 2001 definition of a healthy open source project:
○ It works and it solves a business or technical problem
● 2021 definition of a healthy open source project:
○ Working, secure, and carbon-neutral code, delivered on an environmentally friendly,
sustainable, predictable, repeatable, and supply-chain secure basis with millions of users and
thousands of GitHub stars, along with a plethora of adopters and a large, dynamic ecosystem
all delivered by a diverse and welcoming community governed in an open and transparent
manner with a commitment to equity and social justice.
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Told you so...
With great power
comes great
responsibility
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Conclusions
● The amount of resources required to have a “healthy open source project”
has increased dramatically
○ Many of the tasks necessary for health fall outside the interests of most developers
● The success of open source is forcing its industrialization and
professionalization
● The ever-growing definitions of “open source software health” may be
unsustainable
○ At a minimum, they are changing the dynamics of how open source is created
● The ability of the “hero programmer” or small teams to significantly impact the
industry has been reduced
○ Not necessarily a bad thing… open source has always been a team sport
COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
Thoughts on the Future
● Successful, impactful, and healthy open source projects:
○ Require the (increasing) support of a foundation; or
○ Require the support of a well-funded startup; or
○ Both
● GitHub is trying
○ Actions, security scans, licensing options, code of conduct templates
Thank you!
Questions?

Open Source Health

  • 1.
    Open Source Health: APractitioners Guide Mike Milinkovich, Eclipse Foundation @mmilinkov Or how the quest for open source health has impacted the Eclipse Foundation, its projects, and its community COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
  • 2.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) “Never let the facts get in the way of a good story.”
  • 3.
    Software ate theworld... COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
  • 4.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) ...then open source gobbled up software
  • 5.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Be Careful What You Wish For.... With great power comes great responsibility
  • 6.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2002: Getting software to work (better)
  • 7.
    Heidelberg, June 13,2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Testing ▪ innovate with confidence ▪ tests run after each build ▪ test kinds ▪correctness tests ▪ assert correct behavior ▪performance tests ▪ assert no performance regressions ▪ based on a database of previous test run measurements ▪resource tests, leak tests ▪ assert no resource consumption regressions Defect s Testing Kent Beck – JUnit handbook
  • 8.
    Heidelberg, June 13,2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Unit Test Report
  • 9.
    Heidelberg, June 13,2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Performance Test Report
  • 10.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2005: Is anyone using our stuff?
  • 11.
    Early Days 5 May2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 11 Welcome to eclipse.org Eclipse is a kind of universal tool platform - an open extensible IDE for anything and nothing in particular.
  • 12.
    Eclipse: A LeadingCommunity 5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 12
  • 13.
    2017 © CopyrightEclipse Foundation, Inc. THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Impacting a Market 13
  • 14.
    2017 © CopyrightEclipse Foundation, Inc. THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Impacting a Market 14
  • 15.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2005: Focus on Adopters
  • 16.
    IP Policy 5 May2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 16
  • 17.
    Predictability 13-Apr-2016 17 Copyright (c)2015, Eclipse Foundation, Inc. Made available under CC-BY-SA 4.0
  • 18.
    Heidelberg, June 13,2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) How is the Development Done? milestones first API first end game retrospectives always have a client built to last continuous integration community involvement new & noteworthy early incremental planning continuous testing consume your own output component centric drive with open eyes validate reduce stress learn enable attract to latest transparency validate update dynamic teams show progress enable explore validate
  • 19.
  • 20.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2006: Supporting an ecosystem
  • 21.
    Copyright © 2008Eclipse Foundation, Inc. All Rights Reserved. Made available under the Eclipse Public License 1.0 Platform == Architecture of Participation “what really distinguishes open source is not just source, but an "architecture of participation" ….” Tim O’Reilly http://www.oreillynet.com/pub/wlg/3017?wlg=yes http://www.flickr.com/photos/sentience/261922677/ http://www.flickr.com/photos/ckindel/135426249/
  • 22.
    Copyright © 2008Eclipse Foundation, Inc. All Rights Reserved. Made available under the Eclipse Public License 1.0 The Eclipse Experience – Architecture of Participation Run-time Plug-ins Platform New Plug-ins are First Class Citizens – same footing for everyone Open API and commercially friendly licensing – Low barriers to Entry Ease of Integration and Extensibility Spurs Innovation Competition can take place on implementations – users decide winners Successful Ecosystems are built on this model!
  • 23.
    Eclipse Marketplace ● Catalogover 1000+ solutions ● Make it easy to find Eclipse-based products ● Anyone may list their Eclipse product
  • 24.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2007: Focus on Contributors
  • 25.
    Contributions Abound 5 May2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 25
  • 26.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Eclipse Orion
  • 27.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Eclipse IDE Platform
  • 28.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Companies by Commits in 2021Q1
  • 29.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2007: Basic Security
  • 30.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2010: The emergence of Social Coding aka The death of the self-hosted foundation forge
  • 31.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) The impact of GitHub
  • 32.
    Proposal 26-Mar-2013 Copyright (c)2013, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 32 Contributions & Patches Git Builds Signing Release & Download IPzilla & PMI Contributions & Patches SCM Bugzilla & Gerrit Git clone of main SCM repos Pull requests Github
  • 33.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2013: Social agency
  • 34.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Code of Conduct
  • 35.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2014: Long Term Sustainability
  • 36.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Eclipse BIRT
  • 37.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2017: Securing FLOSS
  • 38.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2021: Supply Chain Security
  • 39.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
  • 40.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Reproducible Builds, Vulnerability Scanning
  • 41.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2021: Carbon Neutral Coding
  • 42.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) The ever-growing and evolving definition of “Health” Early days… software that works 2004… Is anyone using our stuff? 2005… Focus on adopters 2006… Supporting an ecosystem 2007… Focus on contributors and contributor diversity (organization) 2007… Basic security 2010… Social coding a.k.a. the death of the forge 2013… Social agency, code of conduct, diversity initiatives 2014... Long term Sustainability (Heartbleed 2014) 2017… Security v2 - CVE issuing authority, security policy 2021… Supply Chain Security and Management OpenChain, SPDX, reproducible builds, US Executive Order, Google blog post 2021 “Green” open source
  • 43.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Summary ● 2001 definition of a healthy open source project: ○ It works and it solves a business or technical problem ● 2021 definition of a healthy open source project: ○ Working, secure, and carbon-neutral code, delivered on an environmentally friendly, sustainable, predictable, repeatable, and supply-chain secure basis with millions of users and thousands of GitHub stars, along with a plethora of adopters and a large, dynamic ecosystem all delivered by a diverse and welcoming community governed in an open and transparent manner with a commitment to equity and social justice.
  • 44.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Told you so... With great power comes great responsibility
  • 45.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Conclusions ● The amount of resources required to have a “healthy open source project” has increased dramatically ○ Many of the tasks necessary for health fall outside the interests of most developers ● The success of open source is forcing its industrialization and professionalization ● The ever-growing definitions of “open source software health” may be unsustainable ○ At a minimum, they are changing the dynamics of how open source is created ● The ability of the “hero programmer” or small teams to significantly impact the industry has been reduced ○ Not necessarily a bad thing… open source has always been a team sport
  • 46.
    COPYRIGHT (C) 2021,ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Thoughts on the Future ● Successful, impactful, and healthy open source projects: ○ Require the (increasing) support of a foundation; or ○ Require the support of a well-funded startup; or ○ Both ● GitHub is trying ○ Actions, security scans, licensing options, code of conduct templates
  • 47.