Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[OSPO Book] Update titles for each chapter #530

Merged
merged 4 commits into from
Jan 2, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ospo-book/content/en/01-chapter.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Introduction to Open Source Program Offices"
title: "Chapter 1: Introduction to Open Source Program Offices"
status: Completed
weight: 30
---
Expand Down
2 changes: 1 addition & 1 deletion ospo-book/content/en/02-chapter.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "The Value of Open Source Program Offices"
title: "Chapter 2: The Value of Open Source Program Offices"
status: Completed
weight: 40
---
Expand Down
2 changes: 1 addition & 1 deletion ospo-book/content/en/03-chapter.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "Foundations and Essential Elements"
title: "Chapter 3: Foundations and Essential Elements"
status: Completed
weight: 50
---
Expand Down
2 changes: 1 addition & 1 deletion ospo-book/content/en/05-chapter.md
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
---
title: "Chapter 5: Measuring and Communicating Impact by your OSPO"
status: Completed
weight: 50
weight: 70
---

## Introduction

Metrics for metrics sake benefit no one. Consider these metrics: The average age of issues is 10.3 days. The total number of pull requests was 121 last month. We had 3 new companies join our community over the past 15 days. Without context, these metrics provide no insight, yet we are driven to reach for metrics to provide insight into our complex open source engagements.

There are a number of reasons why we need insights into open source projects. Some example reasons are: An organization built from open source would like to track contributions back to key projects. An organization that participates in an open source ecosystem wants to recognize potential failures and provide stabilizing resources as needed. An organization wants to do their part to ensure the longevity of open source software, in particular, the software that is meaningful to their business. And, of course, an organization needs to remain compliant with upstream license requirements and attend to security issues that can impact the ways they work.

Check failure on line 11 in ospo-book/content/en/05-chapter.md

View workflow job for this annotation

GitHub Actions / Review docs

"alex.Condescending"

Using 'of course' may come across as condescending.

In the past, it may have been possible to get away with knowing little to nothing about important open source projects. This is no longer a viable option, however, so as we get to know the open source projects we care about we can use open source community metrics to help us. In this chapter, we consider how community metrics can be placed in context and how together they improve insight to drive better strategic decisions across an organization.

Expand Down Expand Up @@ -45,15 +45,15 @@

#### Goal 3: Ecosystem Impact

Working with open source is never easy as rival corporations may dominate upstream projects that your organization is interested in, upstream projects may unexpectedly change licenses, and contributor agreements, whether individual or organizational, can be complex to understand and adhere to. Clearly, such challenges can be overcome and often include strategic engagement with the projects your organization aims to benefit from. Open source ecosystems are economic and social systems comprising different companies, motivations, and requirements intended to support production and demands. In an effort to ensure the efficiency and durability of any open source ecosystem, companies must not only monitor the ecosystem's long-term viability but also engage within the ecosystem when problems are identified and stabilization is required. Key questions to consider regarding ecosystem impact include:

Check failure on line 48 in ospo-book/content/en/05-chapter.md

View workflow job for this annotation

GitHub Actions / Review docs

"alex.Condescending"

Using 'easy' may come across as condescending.

Check failure on line 48 in ospo-book/content/en/05-chapter.md

View workflow job for this annotation

GitHub Actions / Review docs

"alex.Condescending"

Using 'Clearly' may come across as condescending.

* What percentage of our suppliers provide open source software bills of material?
* What is the long-term viability of the open source projects we rely on?
* What is the risk to the ecosystem if an open source project becomes unviable?

Check failure on line 52 in ospo-book/content/en/05-chapter.md

View workflow job for this annotation

GitHub Actions / Review docs

"Vale.Spelling"

Did you really mean 'unviable'?

#### Goal 4: Organizational Impact

Engagement with open source communities includes working in the upstream to effectively use open source software in organizational products. In this, there is a need to monitor the intake of open source software for infosec, legal, and engineering reasons. Companies can establish software intake processes, working with teams to either technically track or socially consider issues related to open source intake. Organization impact can also include working downstream with projects and companies that rely on your organizational products. This can include working to gain a clearer picture of the open source that is in your shipped products. Organizations can work in securing and regulating their own internal open source processes in an effort to improve product development activities. Key questions to consider regarding organization impact include:

Check failure on line 56 in ospo-book/content/en/05-chapter.md

View workflow job for this annotation

GitHub Actions / Review docs

"Vale.Spelling"

Did you really mean 'infosec'?

* What characteristics does an organization inspect related to inbound open source software?
* What product-level software and infrastructure contains open source software dependencies?
Expand All @@ -63,7 +63,7 @@

## A Case of Organizational Impact: Open Source Use and Intake

Measurement of open source projects helps your OSPO go beyond just communicating impact by taking steps to improve projects in ways that reduce your risk and make their use even more impactful for your organization. As part of an OSPO’s open source strategy, you can consider improvements that will allow you to show even greater impact for your efforts in future years. These improvements can be in open source projects that stem from within your organization and in the important upstream projects where your employees contribute. The CHAOSS project has a series of [Practitioner Guides](https://chaoss.community/about-chaoss-practitioner-guides/) that can help you address the prior goals and questions and demonstrate impact by increasing contributor sustainability, improving responsiveness, and expanding organization participation.

Check failure on line 66 in ospo-book/content/en/05-chapter.md

View workflow job for this annotation

GitHub Actions / Review docs

"Vale.Spelling"

Did you really mean 'impactful'?

As an example of organizational impact, Linåker et al. (2024) conducted a study that explored how open source intake processes could be constructed to accommodate considerations of open source project health-related measures. Analyzing the health of open source projects is a critical practice for organizations to ensure the robustness and reliability of their software systems, both when considering the intake of new open source components, and in monitoring existing dependencies already integrated and deployed in production. If the level of upstream open source project health is insufficient, an alternative sourcing decision needs to be considered (e.g., adopt another open source solution or build something from scratch), or if possible and strategically motivated, contribute and engage in the concerned open source project to improve its health.

Expand Down
Loading