Open Source Health - A Crisis of Expectations
summary
Eclipse Foundation experience spans 18 years and scaling from a single project to ~400 projects and ~300 members, arguing that “healthy” now means much more than code that works: metrics moved from millions of downloads and a jump to ~61% market share for the IDE to coordinated releases like the simultaneous release train (on-time for 14–15 years), contributor diversity, signing artifacts (post‑2007), becoming a CVE numbering authority (2017), rebooting stalled projects like eclipse burke, and building the scanner Eclipse Steady — while OpenSSF estimates ~$150M/year for supply‑chain security.
AI-written summary · about
chapters (13)
- 0:00Introduction to open source health
- 2:26Early open source project expectations
- 5:39Measuring adoption and market impact
- 8:27Focusing on contributor diversity
- 10:10Security as a growing priority
- 12:36Diversity and community codes of conduct
- 13:39Long-term sustainability concerns
- 14:43Formalizing security processes
- 15:45Supply chain security awareness
- 16:50Green open source initiatives
- 17:52Evolving definitions of health
- 20:58Responsibility and resource challenges
- 24:47Future of open source funding
related talks
01h 21mOpen Source Best Practices at Eclipse Foundation
16mA Journey of Contribution and Collaboration in Open Source
23mManaging the unmanageable: community driven projects at Eclipse Foundation
22mThe State of the Eclipse Community
32mOpen Source - A Journey of Contribution and Collaboration
22mState of the Eclipse Foundation
57mKeynote: Surviving Open Source
30mEffective Vulnerability Management for Over 400 Projects at the Eclipse Foundation