Open Source Strategy Forum London 2021

Consuming Open Source in your business is fundamentally different from consuming proprietary software from traditional providers. In particular, consuming Open Source implies being a community member and contributing as well as consuming. We propose a set of challenges that need to be addressed by any commercial consumer of Open Source software, and how close control as well as more direct involvement with the supply chain can address them. We also demonstrate the feasibility of this by linking it to the efforts of other communities, especially the Open Source Security Foundation (OpenSSF), which are making progress in enabling safer Open Source supply chains.