Dirk Riehle's Industry and Research Publications

Category: 2.3 Open Source (Building)

Upcoming talk on establishing open source license compliance using continuous integration

Philippe Ombredanne, lead maintainer of ScanCode, will give a talk on open source license compliance, injected into my own lecture series on commercial open source software, both organized by CROSS, the Center for Research on Open Source Software at UC Santa Cruz. Abstract Open source has changed deeply how projects and products are created; they…

2021-07-07
Creating and growing healthy community open source projects [PLoP 2020]

Abstract: This article presents a succinct and minimal handbook of best practices of how to create and grow community open source projects. We start with the assumption that the handbook’s user has a minimal but useful piece of software at hand that they want to open source and build a community around. Keywords: Open source,…

2021-04-19
Industry best practices for component approval in open source governance [EuroPLoP 2020]

Abstract: Increasingly companies realize the value of using free/libre and open source software (FLOSS) in their products, but need to manage the associated risks. Leading companies introduce open source governance as a solution. A key aspect of corporate FLOSS governance deals with choosing and evaluating open source components for use in products. Following an industry-based…

2021-01-20
Getting started with corporate open source governance: A case study evaluation of industry best practices [HICSS 2021]

Abstract: Open source software usage in companies is on the rise, often resulting in lower development costs, higher quality, and quick availability of code. However, using open source software in products comes with legal, business, and technical risks. Experienced companies prevent and address these risks through corporate open source governance. In our previous work, we…

2021-01-18
Continuous open source license compliance (Phipps & Zacchiroli, IEEE Computer)

I’m happy to report that the 12th article in the open source column of IEEE Computer has been published. Title Continuous Open Source License Compliance Keywords Open Source Software, Licenses, Supply Chains, Standards, Computer Security Authors Simon Phipps, Meshed Insights Ltd. Stefano Zacchiroli, Universite de Paris, France Publication Computer vol. 53, no. 12 (December 2020), pp…

2020-12-08
Standardizing open source license compliance with OpenChain (Shane Coughlan, IEEE Computer Column)

I’m happy to report that the 11th article in the open source column of IEEE Computer has been published. Title Standardizing Open Source License Compliance With OpenChain Keywords Cryptography, Distributed Databases, IEC Standards, ISO Standards, Legislation, Project Management, Public Domain Software, Software Development Management, Software Standards, Blockchain, Open Chain Project, ISO IEC JTC 1 PAS…

2020-11-17