Open Source Health
0 likes234 views
The document discusses how the definition of a healthy open source project has evolved over time at the Eclipse Foundation from 2001 to 2021. It began with ensuring software works properly but now includes priorities like security, sustainability, supply chain management, and building an inclusive community. The Eclipse Foundation has played a key role in these changes by focusing on adopters, contributors, social coding practices, and addressing modern issues like reproducible builds and carbon neutral development.
Open Source Health
- 1. Open Source Health: A Practitioners Guide Mike Milinkovich, Eclipse Foundation @mmilinkov Or how the quest for open source health has impacted the Eclipse Foundation, its projects, and its community COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
- 2. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) “Never let the facts get in the way of a good story.”
- 3. Software ate the world... COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
- 4. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) ...then open source gobbled up software
- 5. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Be Careful What You Wish For.... With great power comes great responsibility
- 6. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2002: Getting software to work (better)
- 7. Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Testing ▪ innovate with confidence ▪ tests run after each build ▪ test kinds ▪correctness tests ▪ assert correct behavior ▪performance tests ▪ assert no performance regressions ▪ based on a database of previous test run measurements ▪resource tests, leak tests ▪ assert no resource consumption regressions Defect s Testing Kent Beck – JUnit handbook
- 8. Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Unit Test Report
- 9. Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Performance Test Report
- 10. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2005: Is anyone using our stuff?
- 11. Early Days 5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 11 Welcome to eclipse.org Eclipse is a kind of universal tool platform - an open extensible IDE for anything and nothing in particular.
- 12. Eclipse: A Leading Community 5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 12
- 13. 2017 © Copyright Eclipse Foundation, Inc. THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Impacting a Market 13
- 14. 2017 © Copyright Eclipse Foundation, Inc. THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Impacting a Market 14
- 15. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2005: Focus on Adopters
- 16. IP Policy 5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 16
- 17. Predictability 13-Apr-2016 17 Copyright (c) 2015, Eclipse Foundation, Inc. Made available under CC-BY-SA 4.0
- 18. Heidelberg, June 13, 2005 COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) How is the Development Done? milestones first API first end game retrospectives always have a client built to last continuous integration community involvement new & noteworthy early incremental planning continuous testing consume your own output component centric drive with open eyes validate reduce stress learn enable attract to latest transparency validate update dynamic teams show progress enable explore validate
- 19. Eclipse C/C++ Development Tools
- 20. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2006: Supporting an ecosystem
- 21. Copyright © 2008 Eclipse Foundation, Inc. All Rights Reserved. Made available under the Eclipse Public License 1.0 Platform == Architecture of Participation “what really distinguishes open source is not just source, but an "architecture of participation" ….” Tim O’Reilly http://www.oreillynet.com/pub/wlg/3017?wlg=yes http://www.flickr.com/photos/sentience/261922677/ http://www.flickr.com/photos/ckindel/135426249/
- 22. Copyright © 2008 Eclipse Foundation, Inc. All Rights Reserved. Made available under the Eclipse Public License 1.0 The Eclipse Experience – Architecture of Participation Run-time Plug-ins Platform New Plug-ins are First Class Citizens – same footing for everyone Open API and commercially friendly licensing – Low barriers to Entry Ease of Integration and Extensibility Spurs Innovation Competition can take place on implementations – users decide winners Successful Ecosystems are built on this model!
- 23. Eclipse Marketplace ● Catalog over 1000+ solutions ● Make it easy to find Eclipse-based products ● Anyone may list their Eclipse product
- 24. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2007: Focus on Contributors
- 25. Contributions Abound 5 May 2010 Copyright (c) 2010, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 25
- 26. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Eclipse Orion
- 27. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Eclipse IDE Platform
- 28. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Companies by Commits in 2021Q1
- 29. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2007: Basic Security
- 30. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2010: The emergence of Social Coding aka The death of the self-hosted foundation forge
- 31. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) The impact of GitHub
- 32. Proposal 26-Mar-2013 Copyright (c) 2013, Eclipse Foundation, Inc. Made available under the Eclipse Public License 1.0 32 Contributions & Patches Git Builds Signing Release & Download IPzilla & PMI Contributions & Patches SCM Bugzilla & Gerrit Git clone of main SCM repos Pull requests Github
- 33. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2013: Social agency
- 34. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Code of Conduct
- 35. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2014: Long Term Sustainability
- 36. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Eclipse BIRT
- 37. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2017: Securing FLOSS
- 38. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2021: Supply Chain Security
- 39. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)
- 40. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Reproducible Builds, Vulnerability Scanning
- 41. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) c. 2021: Carbon Neutral Coding
- 42. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) The ever-growing and evolving definition of “Health” Early days… software that works 2004… Is anyone using our stuff? 2005… Focus on adopters 2006… Supporting an ecosystem 2007… Focus on contributors and contributor diversity (organization) 2007… Basic security 2010… Social coding a.k.a. the death of the forge 2013… Social agency, code of conduct, diversity initiatives 2014... Long term Sustainability (Heartbleed 2014) 2017… Security v2 - CVE issuing authority, security policy 2021… Supply Chain Security and Management OpenChain, SPDX, reproducible builds, US Executive Order, Google blog post 2021 “Green” open source
- 43. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Summary ● 2001 definition of a healthy open source project: ○ It works and it solves a business or technical problem ● 2021 definition of a healthy open source project: ○ Working, secure, and carbon-neutral code, delivered on an environmentally friendly, sustainable, predictable, repeatable, and supply-chain secure basis with millions of users and thousands of GitHub stars, along with a plethora of adopters and a large, dynamic ecosystem all delivered by a diverse and welcoming community governed in an open and transparent manner with a commitment to equity and social justice.
- 44. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Told you so... With great power comes great responsibility
- 45. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Conclusions ● The amount of resources required to have a “healthy open source project” has increased dramatically ○ Many of the tasks necessary for health fall outside the interests of most developers ● The success of open source is forcing its industrialization and professionalization ● The ever-growing definitions of “open source software health” may be unsustainable ○ At a minimum, they are changing the dynamics of how open source is created ● The ability of the “hero programmer” or small teams to significantly impact the industry has been reduced ○ Not necessarily a bad thing… open source has always been a team sport
- 46. COPYRIGHT (C) 2021, ECLIPSE FOUNDATION. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0) Thoughts on the Future ● Successful, impactful, and healthy open source projects: ○ Require the (increasing) support of a foundation; or ○ Require the support of a well-funded startup; or ○ Both ● GitHub is trying ○ Actions, security scans, licensing options, code of conduct templates