Open Source Best Practices
CRA at the time of submission is still in a draft status, but it is relatively clear that it will impose a duty to make the software safer if and when it is distributed on the market as a final product. In any case, whatever the outcome of such discussion is, open source projects should strive to ease up CRA compliance for their downstream adopters, if they want to keep them.
Open Source Best Practices
Most developers don’t understand (or use) CVE scores. Their dependency selection criteria are generally feature-based, with maybe a nod towards licencing. Can we teach developers to choose safer software in deterministic and realistic ways? In this talk, we’ll cover emerging industry ideas about ways to evaluate open-source projects that will connect with both developers and IT. Choosing wisely might be possible after all.
Open Source Best Practices
In recent years, the proliferation of software supply chain attacks has highlighted the critical importance of ensuring the security of the software development and distribution process. Open-source projects are an essential part of today’s software supply chain: they both rely on and are relied upon by third-party libraries, frameworks, components, and complete products. Therefore, it is crucial for open-source projects to take great care in avoiding vulnerabilities that can, directly or indirectly, compromise the integrity and confidentiality of software systems. To assist its projects in addressing these challenges, the Eclipse Foundation has established a security team dedicated to helping projects strengthen their supply chain. In this tutorial, the Eclipse Foundation's Security Team will provide a comprehensive overview of software supply chain security, covering essential concepts, best practices, and practical techniques.
Open Source Best Practices
Join us for an insightful presentation on the cutting-edge topic of data-driven testing using the latest Jakarta Persistence Specifications: Data and NoSQL technologies. We will delve into Java frameworks such as JUnit Jupiter, AssertJ, and TestContainer, showcasing how they can empower developers to achieve exceptional code quality through domain-driven tests. By leveraging contextual knowledge and data exploration techniques, we'll explore practical strategies to optimize your testing efforts and elevate the overall quality of your codebase.
Open Source Best Practices
Nowadays, more than the contribution guide in every open-source project is required to describe the approaches, techniques, and how people solve break changes.
We all know: they are the most democratic projects we can work on, but sometimes not follow basic practices to elevate the project quality.
This talk will show you how to help the projects and the contributors better understand the documentation, how they can contribute, and the process. You will learn about the following:
Open Source Best Practices
Open Source Program Offices (OSPOs) play a pivotal role in fostering open source collaboration, nurturing developer communities, and driving innovation within organizations. The purpose of this conference talk is to provide practical insights and actionable strategies for effectively running an OSPO. Drawing from the expertise and experiences of the GItHub OSPO, this presentation will delve into the key components and best practices necessary to cultivate open source success.
Open Source Best Practices
Two GitHub organizations with over 200 members, more than 100 repositories and 30+ committers in Eclipse - that's whatwe call a whale. We, that is Carsten and Sebastian as representatives of the DevSecOps/System-Team, the team driving the Open Source governance processes, build automation and managing the infrastructure (GitHub/Azure AKS).
Open Source Best Practices
There are almost as many software modules in the public registeries as the number of software developers. How reusable these modules are? How do you make sure the code you publish or consume are suitable for industrial grade applications?
Open Source Best Practices
What does a forest have to teach us about open-source projects? There is a lot to learn about fostering a healthy ecosystem by observing and listening to another. This pictoral presentation looks at the makings of several urban afforestation projects, including application of the Miyawaki method to create fast growing mini-forests. We will discuss how the inhabitants of the forest interoperate and draws some analogies and lessons for those of us who wish to improve our open-source projects. What does it mean to say you can not see the forest for the trees? Let's step back and look at our projects as a whole, without getting bogged down in day to day details for a new perspective on project health. Bring your questions about project culture or forest management, and we will have some fun while we improve our ecosystems together.
Open Source Best Practices
The imperative for sustainable manufacturing has never been greater. By harnessing the power of open-source technologies, we can create smart factories that optimize resource utilization, minimize environmental impact, and embrace circular economy principles. The objective of this talk is to present the concept and practical implementation of building a greenfield smart factory powered by open-source technologies.
Open Source Best Practices