Dirk Riehle's Industry and Research Publications

Category: 2.3 Open Source (Building)

Open-source software: The ultimate in reuse or a risk not worth taking? (Mead et al., IEEE Computer)

I’m happy to report that the 33rd article in the open source column of IEEE Computer has been published. As always, please consider writing an article proposal! Title Open-source software: The ultimate in reuse or a risk not worth taking? Keywords None Authors Nancy R. Mead, Carol Woody, Scott Hissam Publication Computer vol. 58, no.…

2025-02-02
Open source program offices [Computer Magazine]

I’m happy to report that the 32th article in the open source column of IEEE Computer has been published. As always, please consider writing an article proposal! Title Open Source Program Offices Keywords Open source governance, open source license compliance, open source program office, OSPO Authors Dirk Riehle Publication Computer vol. 57, no. 12 (December…

2024-12-12
You just don’t understand (open source edition)

Listening to open source developers complaining about companies not donating money and then getting ignored by said companies reminds me of a quarreling couple, where one side has a lot to say and the other side is just silent. Let me turn this silence into statements a company would make. Let’s go! Open source developer:…

2023-11-22
Open source dependencies are investments

The Linux Foundation’s research arm just published a report about interviews with 32 maintainers of critical open source projects (local copy). Only 62% of these maintainers, i.e. 20 people, were employed by their organizations to work on these open source components. I consider this low and would have expected a higher number. What’s worse, only…

2023-08-02
Open source license inconsistencies on GitHub [TOSEM Journal]

Abstract: Almost all software, open or closed, builds on open source software and therefore needs to comply with the license obligations of the open source code. Not knowing which licenses to comply with poses a legal danger to anyone using open source software. This article investigates the extent of inconsistencies between licenses declared by an…

2022-11-29
Open-source software governance: A case study evaluation of supply-chain management best practices [HICSS 2023]

Abstract: Corporate open source governance aims to manage the increasing use of free/libre and open source software (FLOSS) in companies. To avoid the risks of the ungoverned use, companies need to establish processes addressing license compliance, component approval, and supply chain management (SCM). We proposed a set of industry-inspired best practices for supply chain management…

2022-09-28