Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Copilot Grammar Ryano0oceros #549

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 9 additions & 11 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,15 +17,14 @@

OSPOlogy is an initiative by the [TODO Group](https://todogroup.org/). Our collective resources, including frameworks and templates, are freely available for any organization to use, providing proper attribution to the repository and brand.


## Forum

The official forum (OSPOlogy GH Discussions) facilitates discussions on open source management, exploring its role across specializations (e.g., security, AI infrastructure, business strategy), addressing shared challenges (e.g., measuring the value of open source management and OSPOs), and fostering community-driven proposals.

## Activities and Frameworks

> [!note]
> By using OSPOlogy frameworks and attributing the brand, your organization is helping unify efforts and enhancing the visibility of the strategic value of open source management talent across diverse industries and business areas to key stakeholders, reducing resource fragmentation and duplication
> By using OSPOlogy frameworks and attributing the brand, your organization is helping unify efforts and enhancing the visibility of the strategic value of open source management talent across diverse industries and business areas to key stakeholders, reducing resource fragmentation and duplication.

### Virtual

Expand All @@ -34,7 +33,7 @@ The official forum (OSPOlogy GH Discussions) facilitates discussions on open sou
These webinars cover OSPO-related topics with special guests and community discussions. All sessions are recorded, edited, and available on the [OSPOlogy YouTube Channel](https://www.youtube.com/channel/UCi-ELHAwzoYZvAs4FH-ShaA). Explore the event page and past sessions here: [OSPOlogy Webinars](https://github.com/todogroup/ospology/tree/main/meetings#event-page-and-past-sessions).

> [!warning]
> Since 2024, OSPOlogy Webinars are no longer active and these are being replaced with OSPOlogy TODO Touchpoints
> Since 2024, OSPOlogy Webinars are no longer active and these are being replaced with OSPOlogy TODO Touchpoints.

#### 🗺 OSPOlogy TODO Touchpoints

Expand All @@ -44,28 +43,27 @@ Regional meetings (AMER, EMEA, APAC) provide open agendas and office hours for c

#### ⭐️ OSPOlogy Birds of a Feather (BoF)

Formerly called OSPO BoFs, is a framework consisting of semi-informal discussion sessions held at conferences, where participants with shared interests come together to discuss open source management and OSPO challenges and its strategic value in security, innovation, and collaboration within different industries, specializations, or technologies (e.g. Cloud Native, Energy, Automotive, Security etc). Current adopter includes the Cloud Native Computing Foundation (CNCF)
Formerly called OSPO BoFs, this framework consists of semi-informal discussion sessions held at conferences, where participants with shared interests come together to discuss open source management and OSPO challenges and its strategic value in security, innovation, and collaboration within different industries, specializations, or technologies (e.g. Cloud Native, Energy, Automotive, Security, etc.). Current adopters include the Cloud Native Computing Foundation (CNCF).

> [!important]
> Framework used for [OSPOlogy BoF](https://github.com/todogroup/ospology/tree/main/BoF)
> Framework used for [OSPOlogy BoF](https://github.com/todogroup/ospology/tree/main/BoF).

#### ⭐️ OSPOlogy *Live* and OSPOlogy Local Meetups

These frameworks support mini-summits or local meetups organized by [OSPO Regional Ambassadors](https://todogroup.org/community/ambassadors/). The goal is to create forums where professionals can share knowledge and experience on the application of open source management to specific industries, technologies, and regions.

> [!important]
> Framework used for [OSPOlogy Local Meetups](https://github.com/todogroup/ospology/tree/main/local-meetups)
> Framework used for [OSPOlogy Local Meetups](https://github.com/todogroup/ospology/tree/main/local-meetups).
>
> Framework used for [OSPOlogy Live](https://github.com/todogroup/ospology/tree/main/ospology-live)

> Framework used for [OSPOlogy Live](https://github.com/todogroup/ospology/tree/main/ospology-live).

## Resources

Resources hosted under OSPOlogy brand and supported by TODO Community
Resources hosted under the OSPOlogy brand and supported by the TODO Community.

### 📖 OSPO Book

The OSPO Book includes resources developed collaboratively across organizations for effective open source management through OSPOs. Is intended for those organizations looking to develop strategies to use, contribute to, or create open source projects.
The OSPO Book includes resources developed collaboratively across organizations for effective open source management through OSPOs. It is intended for those organizations looking to develop strategies to use, contribute to, or create open source projects.
[Find contribution guidelines here](https://github.com/todogroup/ospology/tree/main/ospo-book).

### 📭 Newsletter
Expand All @@ -82,4 +80,4 @@ Contributors can propose updates for future versions in the [dedicated repositor

## 📝 License

This [repository](https://github.com/todogroup/ospology) is provided by the [TODO Group](https://todogroup.org) under the [Creative Commons Attribution 4.0 International License](./LICENSE).
This [repository](https://github.com/todogroup/ospology) is provided by the [TODO Group](https://todogroup.org) under the [Creative Commons Attribution 4.0 International License](./LICENSE).
6 changes: 3 additions & 3 deletions ospo-book/content/en/00-chapter.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ weight: 20

Open source is a reality for all organizations dealing with software in some way, not only for software vendors, but also for any organization addressing digital transformation. So managing open source becomes a requirement for most businesses.

One well established way to manage open source is the pattern of the Open Source Program Office (OSPO). Many companies and other organizations have adopted this pattern and there is a wealth of knowledge and experience on how to do this well. Following the spirit of open source a lot of that is shared openly in the community. This book follows this spirit.
One well-established way to manage open source is the pattern of the Open Source Program Office (OSPO). Many companies and other organizations have adopted this pattern, and there is a wealth of knowledge and experience on how to do this well. Following the spirit of open source, a lot of that is shared openly in the community. This book follows this spirit.

This book serves as a source of knowledge for any person that wants to better understand how OSPOs can address the need to manage open source in an organization. It also aids people working at Open Source Program Offices (OSPOs) in gaining a better understanding of their key role to establish and managing open source strategy and operations. It offers practical recommendations on various aspects, ranging from building an open source strategy, to effectively engaging with external open source communities.
This book serves as a source of knowledge for any person that wants to better understand how OSPOs can address the need to manage open source in an organization. It also aids people working at Open Source Program Offices (OSPOs) in gaining a better understanding of their key role in establishing and managing open source strategy and operations. It offers practical recommendations on various aspects, ranging from building an open source strategy to effectively engaging with external open source communities.

Additionally, the book includes an introduction to getting started with implementing an OSPO.

Expand All @@ -25,6 +25,6 @@ Additionally, it does not intend to offer guidance on the deployment, usage, and
This book is intended for any person that wants to better understand the role of OSPOs within an organization.
More specific examples include:

* Executives, policy-makers and decision-makers who are responsible for establishing, overseeing, funding or sponsoring an OSPO within an organization.
* Executives, policymakers, and decision-makers who are responsible for establishing, overseeing, funding, or sponsoring an OSPO within an organization.
* Open source program managers and leaders who are responsible for coordinating and managing an organization's open source activities and engagement with open source communities.
* Legal and compliance professionals who are responsible for managing legal issues related to open source software, including licensing and intellectual property.
3 changes: 1 addition & 2 deletions ospo-book/content/en/02-chapter.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,8 +33,7 @@ Organizations may encounter issues when managing open source components that are

- **Your organization’s procurement may never be fully met when you adopt open source components:** Open source is a dynamic ecosystem whose contributions should occur as smoothly and naturally as possible. The long procurement processes faced in highly regulated environments, such as finance companies and governments, create a barrier to open source contribution and engagement.

- **Your colleagues may lack understanding of open source::** The concept of open source may not be taken seriously in other areas of the organization involved in decision-making processes, management, or policy making. This will require constant education and demonstration of the risks and value of open source in the organization.

- **Your colleagues may lack understanding of open source:** The concept of open source may not be taken seriously in other areas of the organization involved in decision-making processes, management, or policy making. This will require constant education and demonstration of the risks and value of open source in the organization.

To fully overcome these challenges, organizations must invest in properly managing open source operations on both cultural and practical levels. The *how* of accomplishing this is often through the OSPO, as it fosters committed, cross-functional collaboration within the organization to address open source issues encountered by various teams or departments.

Expand Down
14 changes: 5 additions & 9 deletions ospo-book/content/en/04-chapter.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,6 @@ status: Completed
weight: 60
---


- [Introduction](#introduction)
- [Daily Operations using the OSPO MindMap and Activity Engagement Models](#assessing-daily-operations-using-the-ospo-mindmap-and-activity-engagement-models) - `✅ Assessment`
- [Recommendations](#recommendations) - `💡 Recommendations`
Expand All @@ -14,19 +13,17 @@ weight: 60

OSPO day-to-day operations encompass a broad spectrum of activities aimed at enhancing open source engagement and compliance within the organization, including:

- **Direct Open Source Support:** Involves answering questions on all aspects of open source, including license
compliance, selecting open source software, and interactions with vendors. It also includes engaging with the
community and partners, securing sponsorships, and organizing open source events.
- **Direct Open Source Support:** Involves answering questions on all aspects of open source, including license compliance, selecting open source software, and interactions with vendors. It also includes engaging with the community and partners, securing sponsorships, and organizing open source events.

- **Automation Tools:** Creating process automation to support open source policies is important because policies alone may not always be effective. Managers know that their workers will not always follow policy and therefore want effective options to automate use, management and tracking of open source components. Automation is useful in many areas of open source including licence compliance, and security.
- **Automation Tools:** Creating process automation to support open source policies is important because policies alone may not always be effective. Managers know that their workers will not always follow policy and therefore want effective options to automate use, management, and tracking of open source components. Automation is useful in many areas of open source including license compliance and security.

- **Documentation, Training, and Education:** An OSPO can play a leading role in ensuring that individuals are qualified to assess open source projects for use in the organization and contribute to critical open source projects for the organization. Developing training materials and documentation and/or aiding teams to produce these across different departments are key tasks.

- **Resource Allocation:** There can be a lot of areas that an OSPO can offer value to an organization. Therefore, prioritizing work and allocating resources strategically and tactically is an important activity that will improve the OSPO's impact.
- **Resource Allocation:** There can be a lot of areas that an OSPO can offer value to an organization. Therefore, prioritizing work and allocating resources strategically and tactically is an important activity that will improve the OSPO's impact.

- **Risk Management:** OSPOs are well-placed to take a holistic view on the risk that the organization faces when using open source projects. It is useful for the OSPO to assess the risks by obtaining a comprehensive view of the organization's tech stack. This may include generating SBOMs which allow the OSPO to consider the risks in software from vendors, legacy software, and proprietary software as well as in open source. This is more about a business assessment perspective rather than just data gathering, as risk can only be managed, not eliminated. Optimizing SBOMs is about balancing risks against benefits.
- **Risk Management:** OSPOs are well-placed to take a holistic view of the risk that the organization faces when using open source projects. It is useful for the OSPO to assess the risks by obtaining a comprehensive view of the organization's tech stack. This may include generating SBOMs which allow the OSPO to consider the risks in software from vendors, legacy software, and proprietary software as well as in open source. This is more about a business assessment perspective rather than just data gathering, as risk can only be managed, not eliminated. Optimizing SBOMs is about balancing risks against benefits.

- **Sponsoring Open Source Communities and Foundations:** Your organization depends on open source. The projects in open source are only as healthy as their communities, and you can invest your time and money in supporting communities either directly or through Foundations. These relationships need to be understood and managed with care to achieve outcomes that will benefit the projects and your organization. Sometimes money is not the best fix for a problem, and fostering a closer partnership and providing development, marketing, or programmatic support is more useful.
- **Sponsoring Open Source Communities and Foundations:** Your organization depends on open source. The projects in open source are only as healthy as their communities, and you can invest your time and money in supporting communities either directly or through Foundations. These relationships need to be understood and managed with care to achieve outcomes that will benefit the projects and your organization. Sometimes money is not the best fix for a problem, and fostering a closer partnership and providing development, marketing, or programmatic support is more useful.

- **Measuring Technical Debt:** Providing knowledge on how to measure the technical debt on an open source project helps to determine the risks associated with the project and, when done in collaboration with the project community, is a form of educational advocacy to help projects improve and sustain themselves.

Expand Down Expand Up @@ -130,4 +127,3 @@ Licence changes on an Open Source project. OSPOs face the challenge of navigatin
- [Computer Emergency Response Team (CERT)](https://www.cisa.gov/uscert/)
- [Redis License Change](https://www.theregister.com/2024/03/22/redis_changes_license/)
- [AlmaLinux OS Foundation](https://thenewstack.io/jack-aboutboul-how-almalinux-came-to-be-and-why-it-was-needed/)

6 changes: 3 additions & 3 deletions ospo-book/content/en/05-chapter.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,9 +13,9 @@ weight: 70

> This chapter has been developed through the collective expertise of [CHAOSS open source project](https://chaoss.community/) and participants from the CHAOSS [OSPO Metrics Working Group](https://github.com/chaoss/wg-ospo), with support from the TODO Group.

Metrics for metrics sake benefit no one. Consider these metrics: The average age of issues is 10.3 days. The total number of pull requests was 121 last month. We had 3 new companies join our community over the past 15 days. Without context, these metrics provide no insight, yet we are driven to reach for metrics to provide insight into our complex open source engagements.
Metrics for metrics' sake benefit no one. Consider these metrics: The average age of issues is 10.3 days. The total number of pull requests was 121 last month. We had 3 new companies join our community over the past 15 days. Without context, these metrics provide no insight, yet we are driven to reach for metrics to provide insight into our complex open source engagements.

There are a number of reasons why we need insights into open source projects. Some example reasons are: An organization built from open source would like to track contributions back to key projects. An organization that participates in an open source ecosystem wants to recognize potential failures and provide stabilizing resources as needed. An organization wants to do their part to ensure the longevity of open source software, in particular, the software that is meaningful to their business. And, of course, an organization needs to remain compliant with upstream license requirements and attend to security issues that can impact the ways they work.
There are several reasons why we need insights into open source projects. Some example reasons are: An organization built from open source would like to track contributions back to key projects. An organization that participates in an open source ecosystem wants to recognize potential failures and provide stabilizing resources as needed. An organization wants to do its part to ensure the longevity of open source software, in particular, the software that is meaningful to their business. And, of course, an organization needs to remain compliant with upstream license requirements and attend to security issues that can impact the ways they work.

In the past, it may have been possible to get away with knowing little to nothing about important open source projects. This is no longer a viable option, however, so as we get to know the open source projects we care about we can use open source community metrics to help us. In this chapter, we consider how community metrics can be placed in context and how together they improve insight to drive better strategic decisions across an organization.

Expand All @@ -27,7 +27,7 @@ Open source projects provide a platform for companies to communicate and share t

#### Communicating Impact

Beyond giving us an understanding of an open source project (or a collection of projects), metrics play an important role in communicating impact. Following the goal-question-metric approach used in the CHAOSS project, we present four goals that open source program offices can consider, alongside associated questions that can provide insight to the associated goals. Stemming from these goals and questions, we recommend a series of metric-related CHAOSS [Practitioner Guides](https://chaoss.community/about-chaoss-practitioner-guides/) to provide specific recommendations within an organization.
Beyond giving us an understanding of an open source project (or a collection of projects), metrics play an important role in communicating impact. Following the goal-question-metric approach used in the CHAOSS project, we present four goals that open source program offices can consider, alongside associated questions that can provide insight into the associated goals. Stemming from these goals and questions, we recommend a series of metric-related CHAOSS [Practitioner Guides](https://chaoss.community/about-chaoss-practitioner-guides/) to provide specific recommendations within an organization.

<img width="750" alt="CHAOSS Health Impacts" src="https://github.com/user-attachments/assets/f13b8fd0-8342-4a90-b5cb-d533c6454801" />

Expand Down
Loading