Open Source Summit North America 2022
2022-06-21..2022-06-24
-- online --
[Open Source Summit North America 2017, Open Source Summit North America 2018, Open Source Summit North America 2022, Open Source Summit North America 2023 - Diversity Empowerment Summit, Open Source Summit North America 2023: Open Source On-Ramp, Open Source Summit North America 2024 - Digital Trust, Open Source Summit North America 2025, Open Source Summit North America 2026]
who it's for
open source program office leads, community managers, developer relations engineers, engineering managers, legal and compliance engineers, security engineers
topics
OSPO five-stage maturity model; building communities of practice; CHAOSS metrics and Augur dashboards; contribution workflows and bootcamps; GitHub dependency graph inventory; OpenSSF Allstar for repo security; SBOMs and supply chain security; SPDX license list maintenance; incubation and inner source lifecycles; measuring contributor health and dashboards
| title | author | length |
|---|---|---|
| Does Your OSPO Help or Hinder Contributions? | Dawn M Foster | 42m |
Practical checklist for an OSPO that helps rather than blocks: align contributions to business goals and pick strategic projects (currently 18… | ||
| GitHub's Data Story: Open Source at the Home for Open Source | Natalie D'Adamio, Ashley Wolf | 14m |
GitHub applies the data warehouse, SQL queries and the dependency graph to inventory dependencies across ~4 million organizations and ~200 million… | ||
| OSPOCon Keynote: OSPO News by TODO Group | Ana Jiménez Santamaría, Chris Aniszczyk | 38m |
Framework shows five cumulative stages and the two axes that determine pace: OSPO maturity model: ad-hoc → legal → community → engagement → leadership… | ||
| Panel Discussion: A How-to Guide for Contributing to Open Source as an Employee | Alyssa P Wright, Duane O'Brien, Josep Prat, Deb Nicholson, Richard Littauer | 47m |
Panel lays out a concrete plan: a working group captures six principles (start early, transparent motivations, respect, end gracefully, etc.) and publishes a… | ||
| The Challenge to Build a Distributed OSPO | Norio Kobota | 24m |
A new distributed OSPO model sets up a 20-member committee supporting thousands of engineers and shows steady growth in inquiries, but most work falls to a few… | ||
| Building an Open Source Community from the Ground Up: Red Hat’s Game Industry Community of Practice | Ruth Suehle | 29m |
Red Hat describes building a Game Industry Community of Practice that grows from one volunteer core into 56 communities of practice, uses an executive sponsor… | ||
| Goldman Sachs' Open Source Program Office - One Year In | Robert Underwood | 45m |
Formal OSPO launches April 2021 and after one year reports concrete work: building a contribution management platform that enforces an internal audit code… | ||
| Panel: A Decade of Open Source in China - Insights Report with Chinese OSPO's Best Practices | Xiaoya Xia, Wei Wang, Richard Sikang Bian, Rong Wang | 28m |
Chinese firms like Alibaba report more than 3,000 GitHub repositories and over one million stars, while xlab analyzes 86 million GitHub event logs in 2020 and… | ||
| The SPDX License List: What, Why and How | Steve Winslow | 41m |
Community-curated machine-readable list that assigns stable identifiers and templated texts to about 500+ licenses and exceptions, produced from a single… | ||
| The TRUE Cost of Open Source | Suzanne Ambiel | 47m |
Open source is ubiquitous but under-supported: studies show 72% of modern apps include externally sourced components and often only 20% of code is net new… | ||
| Using OpenSSF's Allstar to Secure Your Organizations GitHub Repositories | Jeff Mendoza | 36m |
OpenSSF Allstar is a GitHub App that continuously scans org repositories for concrete risks and enforces policies like branch protection, binary artifacts… | ||
| A Walk through the OSPO Five-stage Model and Personas | Ana Jiménez Santamaría | 38m |
Framework maps five stages from ad hoc to legal-driven to community-driven (two phases) to engagement-driven to leadership-driven, measured along two axes… | ||
| Lessons Learned After 1 Year Running an OSPO in Bancolombia (LATAM) | Daniel Estiven Rico Posada | 31m |
One-year report on an OSPO at a Latin American bank: a team of 13 embedded in a developer-experience COE, driving four tracks — migration, contribution… | ||
| OSPOCon Awards | Stephen Jacobs, Ashley Wolf, Stephen Augustus, don foster | 07m |
The OSPO community announces first-time awards and names winners, including Murov receiving a whimsical candlesticks trophy and Goldman Sachs acknowledged… | ||
| Panel Discussion: Lessons Learned: OSPOs in Universities | Clare Dillon, Sayeed Choudhury, Stephen Jacobs, Stephanie Lieggi, John Whelan | 46m |
Universities run OSPOs that treat OSS as primary research object, run devops and tooling (they host and pay for the university GitHub and GitLab), and teach… | ||
| Supply Chain Security, SBOMs and How OSPOs Can Play An Important Role Going Forward - An Ecosystem and Compliance Update | Jeffrey Borek | 34m |
Government pressure after SolarWinds and a White House EO drives an industry push: enterprises move from ~80 to ~500 bundled OSS packages per app, and 84% of… | ||
| You're Doing it Wrong: OSPO Disasters | Van Lindberg | 13m |
Companies lose talent when internal rules block community contributions, with hiring replacement costs estimated at 75–200% of salary. One product embeds GPL… | ||
| Community Data: What to Measure and Why? | Cali Dolfi | 36m |
Argues that useful community metrics come from concrete questions, not vanity counts, and shows a repeatable workflow: pick a magic 8-ball question, map… | ||
| Extrospective OSPOs: Working on 3rd Party OSS | Josep Prat | 39m |
Aiven runs an extrospective OSPO that turns external critical dependencies into internal responsibilities, focused on Kafka Flink Postgres OpenSearch and more… | ||
| From Teacher to OSPO Technologist | Brittany Erica Istenes | 22m |
Career pivot from classroom to corporate open source program office shows concrete outcomes: a classroom program that raises state test scores 55% increase in… | ||
| Using CHAOSS Metrics, Models, and Software to Identify the Most Significant At-Risk Dependencies in Your Portfolio - Sean Goggins, CHAOSS Project and the University of Missouri | Sean P. Goggins | 29m |
CHAOSS software enumerates every dependency across repositories, tracks version ages, and scores risk with the libya metric (example 0.53 years) so teams can… | ||
| nothing matches | ||