Open Source Sustainability and our Corporate Social Responsibility
summary
Random audit of express.js exposes the real problem: the package has 195 dependencies, is maintained effectively by one person yet is relied on for 14 million downloads/week, and control sits with 88 maintainers many without 2FA. Only one dependency (eslint) shows reliable funding (~1.2 FTE via Open Collective); overall funding is tiny compared with value (Open Collective ~£0.5M vs Tidelift ~$40M). The talk gives numbers, attack vectors, funding gaps and concrete corporate responsibility steps.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:18ExpressJS
- 8:07The history of ExpressJS
- 15:22Working in public
- 16:59Hacktoberfest
- 18:24Commons
- 19:42Digital Commons
- 19:53Corporate Social Responsibility
- 20:21Carols Pyramid
- 22:39Turning Principle into Practice
- 23:02Scott Logic
- 24:44Summary
related talks
27mOpen Source Sustainability and Our Corporate Social Responsibility
39mSOS: Sustainable Open Source
14mWhat can we do to make Open Source more sustainable?
36mSOS Sustainable Open Source
39mManaging an Open Source Project
26mTrapped in the Open Source Supply Chain
49mOpen Source is Broken, and it’s Our Fault
33mThe Value of Open Source