Dirk Riehle's Industry and Research Publications

Category: 2.3 Open Source (Building)

Creating and growing healthy community open source projects [PLoP 2020]

Abstract: This article presents a succinct and minimal handbook of best practices of how to create and grow community open source projects. We start with the assumption that the handbook’s user has a minimal but useful piece of software at hand that they want to open source and build a community around. Keywords: Open source,…

2021-04-19
Industry best practices for component approval in open source governance [EuroPLoP 2020]

Abstract: Increasingly companies realize the value of using free/libre and open source software (FLOSS) in their products, but need to manage the associated risks. Leading companies introduce open source governance as a solution. A key aspect of corporate FLOSS governance deals with choosing and evaluating open source components for use in products. Following an industry-based…

2021-01-20
Getting started with corporate open source governance: A case study evaluation of industry best practices [HICSS 2021]

Abstract: Open source software usage in companies is on the rise, often resulting in lower development costs, higher quality, and quick availability of code. However, using open source software in products comes with legal, business, and technical risks. Experienced companies prevent and address these risks through corporate open source governance. In our previous work, we…

2021-01-18
Continuous open source license compliance (Phipps & Zacchiroli, IEEE Computer Column)

I’m happy to report that the 12th article in the Open Source Expanded column of IEEE Computer has been published. Title Continuous Open Source License Compliance Keywords Open Source Software, Licenses, Supply Chains, Standards, Computer Security Authors Simon Phipps, Meshed Insights Ltd. Stefano Zacchiroli, Universite de Paris, France Publication Computer vol. 53, no. 12 (December 2020),…

2020-12-08
Standardizing open source license compliance with OpenChain (Shane Coughlan, IEEE Computer Column)

I’m happy to report that the 11th article in the Open Source Expanded column of IEEE Computer has been published. Title Standardizing Open Source License Compliance With OpenChain Keywords Cryptography, Distributed Databases, IEC Standards, ISO Standards, Legislation, Project Management, Public Domain Software, Software Development Management, Software Standards, Blockchain, Open Chain Project, ISO IEC JTC 1…

2020-11-17
Tools for software composition analysis (Philippe Ombredanne, IEEE Computer Column)

I’m happy to report that the tenth article in the Open Source Expanded column of IEEE Computer has been published. Title Free and Open Source Software License Compliance: Tools for Software Composition Analysis Keywords Open Source Software, Software Composition, Open Source Licenses, Automation Authors Philippe Ombredanne, nexB Inc. Publication Computer vol. 53, no. 10 (October…

2020-10-19