CHAOSS Data Science WG, April 7, 2026 ![rw-book-cover](https://img.youtube.com/vi/nDnxUnY8noM/maxresdefault.jpg) ๐Ÿ”— **Source:** [CHAOSS Data Science WG, April 7, 2026](https://www.youtube.com/watch?v=nDnxUnY8noM) > [!note]+ Document Notes > tags: #chaoss #data-science #augur #8not #ecosope #open-source #metrics #visualization > author: CHAOSS Data Science Working Group > source: YouTube > reference: https://www.youtube.com/watch?v=nDnxUnY8noM > date created: 2024-12-19 14:30 > > # ๐Ÿท๏ธ Title: CHAOSS Data Science WG, April 7, 2026 > <!-- deep-read:sections start --> ## ๐Ÿงฐ Action Inbox - [H1] Submit PR for Augur 8not visualization issues โ€” sovereign tech fund application requirement #career-development - [H2] Formalize ecosope project under CHAOSS repository structure โ€” project governance #project-management - [H3] Review maintainer agreement for ecosope and broader CHAOSS adoption โ€” governance templates #governance ## ๐Ÿงญ Table of Contents - [[#๐Ÿ“ Summary]] - [[#๐Ÿ“– Main Content]] - [[#๐Ÿ—’๏ธ Notes]] - [[#๐Ÿ“š References]] - [[#๐Ÿ—ฃ๏ธ Paraphrase]] - [[#๐Ÿ“ฐ Newsletter]] - [[#โœ… Action Items]] - [[#๐Ÿงช Hypotheses]] - [[#๐Ÿ“Š Methodology]] - [[#โ“ Questions]] - [[#๐Ÿ”ฎ Future Research]] - [[#๐Ÿ’ก Implications]] - [[#๐Ÿง  Learning Styles Assessment]] - [[#๐Ÿ“Š Accessibility Assessment]] - [[#๐ŸŒ DEIB Assessment]] - [[#โœ… Logical Validity]] - [[#๐Ÿ›ก๏ธ DARVO Analysis]] - [[#๐ŸŽฏ Conclusion]] ### ๐Ÿ”— References - [CHAOSS Working Groups](https://chaoss.community/participate/) - [8not Repository](https://github.com/chaoss/8knot) ## ๐Ÿ“ Summary - **What happened**: CHAOSS Data Science Working Group monthly meeting covering 8not contributions, ecosope project formalization, and maintainer agreements - **Why it matters**: Critical governance decisions for growing CHAOSS ecosystem projects and establishing maintainer responsibilities - **Key stakeholders**: Ernest (ecosope maintainer), Adrian (covering for Cali), Nest (foundational staff contributor), Cali (project lead) - **Risks and tradeoffs**: Geographic data analysis raises legal compliance concerns for trade embargo countries; download metrics remain methodologically controversial - **Bottom line takeaway**: CHAOSS is evolving from theoretical metrics to practical software ecosystem with multiple active projects requiring formal governance ## ๐Ÿ“– Main Content The CHAOSS Data Science Working Group is transitioning from an informal collection of metrics discussions to a structured software development ecosystem. Three main initiatives dominated this meeting: individual contributor onboarding to 8not, the formalization of ecosope as an official CHAOSS project, and the adoption of maintainer agreements across CHAOSS repositories. The 8not project, which provides visualizations for software project health metrics, is receiving increased attention as contributors seek assignment to issues for career development purposes, particularly for grant applications like the Sovereign Tech Fund. However, the project currently relies on mock databases and requires more robust testing infrastructure. Ecosope represents a significant evolution in CHAOSS methodology - instead of analyzing individual projects, it performs cross-foundation analysis of Apache Software Foundation, Eclipse Foundation, and CNCF data to understand ecosystem-level sustainability patterns. This timing is particularly relevant given upcoming European Union regulatory changes that will impact open source stewardship. The discussion revealed important ethical and legal considerations around geographic analysis of contributor data. Organizations can face legal liability if they knowingly retain contributors from trade embargo countries (Iran, China), but are not required to actively seek this information. This creates a delicate balance for data science teams working on contributor analytics. ## ๐Ÿ—’๏ธ Notes #### โฑ๏ธ [00:00](https://youtu.be/nDnxUnY8noM?t=0) โ€” [H1] Meeting introductions and agenda setting - Key idea: Adrian covering for Cali, focusing on Augur 8not questions - Evidence: "I'm here mostly just covering for Cali... hoping to help answer questions about potentially Auger 8 stuff" #### โฑ๏ธ [02:30](https://youtu.be/nDnxUnY8noM?t=150) โ€” [H2] Ernest's Sovereign Tech Fund application requirements - Key idea: Need CHAOSS contribution for grant application, targeting 8not visualization issues - Evidence: "I submitted application for the sovereign tech by the SDA... just to meet that requirement I happen to currently contribute to chaos and open telemetry and I just used a not as the third one" #### โฑ๏ธ [05:45](https://youtu.be/nDnxUnY8noM?t=345) โ€” [H3] Issue assignment process for career development - Key idea: Contributors need visible issue assignments on profiles for grant reviewers - Evidence: "just assigning me to that particular issue name so that it could show on my profile" #### โฑ๏ธ [08:20](https://youtu.be/nDnxUnY8noM?t=500) โ€” [H2] Mock database configuration in 8not - Key idea: Environmental variables point to Docker-based mock database for development - Evidence: "there is a environmental variable that is like a sample you know for database connection to a so I noticed that is a mock database" #### โฑ๏ธ [12:15](https://youtu.be/nDnxUnY8noM?t=735) โ€” [H3] Docker infrastructure for testing - Key idea: Empty but schematically correct Augur database exists in Docker container for CI testing - Evidence: "I took an augur database that's basically freshly initialized. It's empty but it's schematically correct and just shipped it in a Docker container" #### โฑ๏ธ [16:30](https://youtu.be/nDnxUnY8noM?t=990) โ€” [H2] Visualization workflow checklist system - Key idea: Each visualization gets standardized checklist including notebook review and data science working group approval - Evidence: "for every visualization it would have this like this check mark on the eight side of each of the steps that need to be done to get a visualization merged into eight not" #### โฑ๏ธ [20:45](https://youtu.be/nDnxUnY8noM?t=1245) โ€” [H1] Geographic data analysis legal concerns - Key idea: Organizations face liability if they knowingly retain contributors from embargo countries - Evidence: "if you know that somebody is in China or Iran, you are liable to remove them from the community" #### โฑ๏ธ [25:30](https://youtu.be/nDnxUnY8noM?t=1530) โ€” [H3] Download metrics methodology controversy - Key idea: Download data widely considered unreliable due to CI/CD overcounting and VPN distortions - Evidence: "a lot of people who've done who do analysis on open source pretty much refuse to look at any download data... because of the like because there's it's a little bit different whenever the mis... very small things can like throw things out the window" #### โฑ๏ธ [32:10](https://youtu.be/nDnxUnY8noM?t=1930) โ€” [H2] Tribal nation use case for consumption metrics - Key idea: Government entities need public consumption tracking for compliance and representation analysis - Evidence: "tribal nation a security council... they have federal and state guidelines... if they're doing it on behalf of a government they have to do it publicly as all governments do" #### โฑ๏ธ [38:45](https://youtu.be/nDnxUnY8noM?t=2325) โ€” [H1] Ecosope project formalization discussion - Key idea: Cross-foundation analysis project ready for official CHAOSS repository status - Evidence: "instead of measuring individual projects... we are now interested in how does communication metrics reported across different foundations" #### โฑ๏ธ [42:20](https://youtu.be/nDnxUnY8noM?t=2540) โ€” [H2] Multi-foundation data integration challenges - Key idea: Apache, Eclipse, CNCF have different stewardship models and JSON schemas requiring complex integration - Evidence: "Those structures are both very different in their stewardship of open source and very different in their JSON schematics" #### โฑ๏ธ [45:15](https://youtu.be/nDnxUnY8noM?t=2715) โ€” [H3] Repository structure for growing CHAOSS ecosystem - Key idea: Multiple data science projects considering donation to CHAOSS, requiring organized structure - Evidence: "there's multiple projects that are like data science focused projects that are talking about donating to Chaos" #### โฑ๏ธ [48:30](https://youtu.be/nDnxUnY8noM?t=2910) โ€” [H2] Maintainer agreement template development - Key idea: Formal maintainer agreements drafted and ready for implementation across CHAOSS projects - Evidence: "we've drafted a version of this... I've had a couple of just like nice comments from community members on it" ## ๐Ÿ“š References - [CHAOSS Metrics](https://chaoss.community/metrics/) - [8not Project Repository](https://github.com/chaoss/8knot) - [Augur Documentation](https://oss-augur.readthedocs.io/) - [Sovereign Tech Fund](https://www.sovereigntechfund.de/) ## ๐Ÿ—ฃ๏ธ Paraphrase - CHAOSS is evolving from an academic metrics discussion group into a practical software ecosystem requiring formal project governance structures and maintainer agreements - Geographic analysis of open source contributors creates legal compliance challenges due to trade embargo restrictions, requiring careful data handling protocols - The ecosope project represents a methodological advancement from single-project analysis to cross-foundation ecosystem health measurement, particularly relevant for EU regulatory compliance ## ๐Ÿ“ฐ Newsletter The CHAOSS Data Science Working Group is scaling rapidly with multiple projects transitioning from research to production software. The ecosope project offers groundbreaking cross-foundation analysis across Apache, Eclipse, and CNCF ecosystems - perfect timing as European Union regulations reshape open source stewardship requirements. Key developments include formalized maintainer agreements, improved Docker infrastructure for 8not development, and careful protocols for geographic data analysis that respect trade embargo compliance. Contributors can now access standardized checklists for visualization development and clearer pathways for career development through visible project contributions. For those interested in ecosystem-level metrics and sustainable open source communities, these tools provide unprecedented insight into multi-foundation health patterns. Resources: [CHAOSS Community](https://chaoss.community/), [8not Repository](https://github.com/chaoss/8knot), [Augur Platform](https://oss-augur.readthedocs.io/) ## โœ… Action Items #### DevRel - Developer experience: Improve 8not Docker setup documentation and mock database workflows - Community management: Establish clear contributor onboarding paths for grant applications and career development #### OSPO - License Compliance: Document geographic data handling protocols for trade embargo compliance - Community Engagement: Support Sovereign Tech Fund applications through visible contribution tracking #### Community - Contributors: Implement standardized visualization checklists for 8not submissions - Maintainers: Deploy formal maintainer agreements across CHAOSS projects #### WordPress - Documentation: Apply CHAOSS visualization workflows to WordPress contributor analytics #### The WPCC - Programs: Consider CHAOSS methodology for cross-project health measurement ## ๐Ÿงช Hypotheses - Formalized maintainer agreements will increase contributor retention and project sustainability across CHAOSS ecosystem - Cross-foundation analysis through ecosope will reveal common patterns in healthy open source communities ahead of EU regulatory implementation - Standardized visualization checklists will improve quality and consistency of 8not dashboard contributions - Docker-based mock databases will reduce contributor onboarding friction for data science projects ### ๐Ÿ“Š Methodology - Survey ecosope data across Apache Software Foundation, Eclipse Foundation, and CNCF for contributor activity patterns pre-CRA implementation - A/B test visualization submission process with and without standardized checklists - Track contributor onboarding success rates before and after improved Docker documentation ### โ“ Questions - How can CHAOSS balance geographic analytics utility with trade embargo compliance requirements? - What governance structures best support rapid scaling from research projects to production software? - Which cross-foundation metrics most accurately predict community sustainability under regulatory pressure? ### ๐Ÿ”ฎ Future Research - Development of automated compliance checking for geographic contributor data - Integration of European Union CRA requirements into open source health metrics - Expansion of ecosope methodology to additional foundation ecosystems ### ๐Ÿ’ก Implications - Practice: Data science teams need explicit protocols for handling contributor geographic information to avoid legal liability - Policy: Open source foundations must prepare governance structures for EU regulatory compliance starting 2026 - Security: Mock database infrastructure requires security review before production deployment - Education: Contributors need clear documentation on Docker setup and testing procedures - Funding: Grant applications increasingly require visible open source contribution history ### ๐Ÿง  Learning Styles Assessment Reading level estimate: 14.2 (Graduate level) #### ๐Ÿ‘€ Visual learners - Present: 8not dashboards, ecosope cross-foundation visualizations - Improve: Docker architecture diagrams, governance workflow charts #### ๐Ÿ”Š Aural learners - Present: Working group meeting recordings, verbal policy discussions - Improve: Podcast format for governance decisions, narrated setup guides #### ๐Ÿ—ฃ๏ธ Verbal learners - Present: Technical definitions, compliance terminology, project analogies - Improve: Glossary of CHAOSS/governance terms, regulatory explanation guides #### ๐Ÿงฉ Kinesthetic learners - Present: Docker container setup, GitHub issue assignment workflows - Improve: Interactive tutorials for 8not development, hands-on compliance training #### ๐Ÿง  Logical learners - Present: Maintainer agreement templates, visualization checklists - Improve: Decision trees for geographic data handling, compliance flowcharts #### ๐Ÿง‘โ€๐Ÿคโ€๐Ÿง‘ Social learners - Present: Working group discussions, collaborative project development - Improve: Mentorship programs for new maintainers, peer review processes #### ๐Ÿง˜โ€โ™€๏ธ Solitary learners - Present: Individual contribution tracking, self-paced project setup - Improve: Self-assessment rubrics for maintainer readiness, solo learning paths #### ๐ŸŒฟ Naturalistic learners - Present: Ecosystem-level thinking, cross-foundation health patterns - Improve: Sustainability metrics, community lifecycle analogies ### ๐Ÿ“Š Accessibility Assessment #### Screen reader semantics - Present: Structured meeting notes, clear heading hierarchy - Improve: Alt text for 8not visualizations, ARIA labels for dashboard elements #### Keyboard navigation - Present: Standard GitHub navigation, text-based issue tracking - Improve: Keyboard shortcuts for dashboard filtering, skip links #### Contrast and readability - Present: Standard text formats in documentation - Improve: High contrast modes for data visualizations, font size options #### Text resizing and reflow - Present: Responsive documentation layouts - Improve: Scalable dashboard components, mobile-friendly visualization views #### Media and captions - Present: Meeting recordings available - Improve: Auto-generated captions, downloadable transcripts #### Forms and interactions - Present: Standard GitHub forms for issues and PRs - Improve: Error handling for Docker setup, accessible form validation #### Standards reference - Map dashboard interface to WCAG 2.2 AA guidelines for data visualization accessibility ### ๐ŸŒ DEIB Assessment #### Cultural breadth - Present: International contributor base across multiple foundations - Improve: Documentation in multiple languages, timezone-inclusive meeting scheduling #### Inclusive language - Present: Technical terminology clearly defined - Improve: Plain language summaries, avoiding geographic bias in examples #### Neurodiversity support - Present: Structured meeting agendas, clear action items - Improve: Multiple information formats, processing time considerations #### Representation - Present: Diverse foundation representation in ecosope analysis - Improve: Balanced case studies, inclusive contributor examples #### Psychological safety - Present: Respectful technical discussions - Improve: Code of conduct enforcement, newcomer support systems ### โœ… Logical Validity #### Strong reasoning - Deductive strength: Geographic compliance requirements follow logically from trade embargo law - Inductive strength: Cross-foundation patterns suggest broader ecosystem health indicators - Causal reasoning: Formal governance structures support sustainable project growth - Analogical strength: Cybersecurity maintainer models apply well to open source governance #### Fallacies - Appeal to tradition: "Download metrics are controversial" doesn't invalidate new use cases - addressed through specific tribal nation context - False dichotomy: Presenting download metrics as entirely useful or useless - resolved through use-case specific evaluation #### Tone of voice - Overall tone: Collaborative and technically focused, with appropriate caution around compliance issues ### ๐Ÿ›ก๏ธ DARVO Analysis - Deny: No denial patterns observed - Attack: No attacking behavior noted - Reverse victim/offender: No victim/offender dynamics present - Emotional cues and rhetoric: Professional technical discussion with appropriate concern for legal compliance ## ๐ŸŽฏ Conclusion CHAOSS is successfully transitioning from academic metrics research to production software ecosystem governance. The formalization of ecosope, implementation of maintainer agreements, and careful handling of geographic compliance --- ## Full Transcript [00:03] Okay, excellent. Well, we're gonna get<br>[00:07] the data science meeting started. Um,<br>[00:10] before we do, everyone just give some<br>[00:13] quick introductions and what you're<br>[00:15] hoping to cover today. And if people<br>[00:16] continue joining in today, we'll uh stop<br>[00:19] and see what they want to cover.<br>[00:25] >> I can start real quick. I'm I'm Adrian.<br>[00:27] I'm here mostly just covering for Cali.<br>[00:30] I guess I work very closely with her.<br>[00:31] So, I'm just kind of covering and um<br>[00:33] hoping to help answer questions about<br>[00:34] potentially Auger 8 stuff if if those<br>[00:37] come up, but I don't really have any<br>[00:38] specific agenda items really. So,<br>[00:44] >> yeah. Um<br>[00:46] introduction, right? So, I'm Nest. I<br>[00:49] have been active in the working group<br>[00:51] for a while and uh I happen to have made<br>[00:53] a bit dinner recently and uh most of my<br>[00:56] work has been on the foundational staff<br>[00:58] we which we're now trying to build up to<br>[01:01] become an important project that we call<br>[01:03] scope. So um that's pretty much about<br>[01:07] me. I do have a few questions about it<br>[01:11] not so maybe because of the meeting<br>[01:25] Sorry, I was saying I think we can<br>[01:28] probably just dive in. I'm going to set<br>[01:29] up a little bit around the agenda which<br>[01:32] is magically happening. I love open<br>[01:34] source. Um and uh yeah, I think we can<br>[01:39] have a discussion around augur and 8not<br>[01:41] and um yeah, I will just take excellent<br>[01:44] notes. Um, I have a few questions<br>[01:47] myself. I've been using Augur<br>[01:50] particularly.<br>[01:51] Uh, and uh, welcome in. We're just at<br>[01:55] introductions. So, uh, say hello if you,<br>[01:58] uh, just come in.<br>[02:09] >> I think you wanted to, right?<br>[02:13] >> Yeah. But it's all right if they can't<br>[02:15] join in at this moment. Um<br>[02:19] we can just jump in on the augur 8 not<br>[02:22] discussion.<br>[02:24] >> Okay. Yeah. Um so um yesterday I I think<br>[02:29] Sally is aware that I submitted<br>[02:31] application for the sovereign tech by<br>[02:35] the SDA and uh you know one of the<br>[02:38] requirements was to contribute to which<br>[02:42] I don't think is straight but you know<br>[02:43] just to meet that requirement I happen<br>[02:47] to currently contribute to chaos and<br>[02:49] open telemetry<br>[02:52] and I just used a not as the third one<br>[02:56] which my contribution is still at the<br>[02:58] very early stage. I'm still yet to send<br>[02:59] the PR but I have like two issues that I<br>[03:02] think I could you know work on which is<br>[03:05] um both of them were opened by Khali but<br>[03:08] unfortunately she's not here. So I<br>[03:10] responded I think earlier today that if<br>[03:13] I could get assigned to the issue just<br>[03:15] for it to be on my profile in case the<br>[03:18] SDF reviewers are doing that before I<br>[03:21] sign the PR. But um I think with the<br>[03:25] current plan that I have that I made in<br>[03:27] the early hours of today I should if<br>[03:30] there are no setting up issues you know<br>[03:33] for contingencies I should be sending a<br>[03:35] view out in a few days.<br>[03:37] So the the issues that I want to work on<br>[03:40] is the visualization that for both<br>[03:43] activity which Ki raised. I think I can<br>[03:46] quickly find that<br>[03:50] and share with you. The point is not<br>[03:52] necessarily the EU but just assigning me<br>[03:55] to that particular um<br>[03:59] um issue name so that it could show on<br>[04:01] my profile.<br>[04:03] >> You have the links to these issues. Um<br>[04:05] >> yeah, bring in the issue numbers and<br>[04:10] >> um since I'm I'm very I<br>[04:13] with some of the complications happening<br>[04:14] in the augur community right now. If you<br>[04:16] if you're looking specifically to be<br>[04:17] assigned to issues that are in the chaos<br>[04:20] or um I have the ability to do that on<br>[04:23] basically any chaos repo. Um Augur<br>[04:26] specifically is not currently in the<br>[04:29] chaos or for reasons I will not get into<br>[04:32] here.<br>[04:34] I actually meant eight not the one on<br>[04:37] red hearts.<br>[04:38] >> Okay. So 8 8 not technically is not in<br>[04:41] the chaos or yet either but um I can I<br>[04:45] do have access to that too if you if if<br>[04:47] that would help you. I'm not sure how<br>[04:48] strict the application is on wanting<br>[04:51] specifically chaos if that's what you're<br>[04:52] applying for but I I can I can do that<br>[04:54] if you send me the issues.<br>[04:56] >> That's no problem. It works really well<br>[04:58] with our plan and it's just open source<br>[05:00] contributions. Oh<br>[05:01] >> okay. Oh it's very broad. Okay. Perfect.<br>[05:04] >> Yeah, this and uh the second one I will<br>[05:09] send I will send the second one but this<br>[05:10] is the one I'm currently focusing on but<br>[05:13] just for reviewer sake to meet the<br>[05:17] reviewer too.<br>[05:19] >> Is that your username?<br>[05:22] >> Yes. Yes.<br>[05:26] >> Or did I send<br>[05:39] Then um<br>[05:42] today a follow-up question to that is<br>[05:45] today I noticed that you know the sample<br>[05:48] environment variable and that has like a<br>[05:52] mock DB of A. So I was going to ask is<br>[05:54] that sufficient for me to do whatever I<br>[05:56] want to do. which rep that was in<br>[06:01] >> you know the current structure on the<br>[06:04] um it's not repo there is a<br>[06:07] environmental variable that is like a<br>[06:09] sample you know for database connection<br>[06:12] to a so I noticed that is a mock<br>[06:15] database and I wanted to confirm I think<br>[06:17] you should be able to answer that<br>[06:18] whether is sufficient for me to do all<br>[06:21] my connections along the way so you know<br>[06:25] I'm just anticipating problems Right.<br>[06:27] >> Can you be a little more specific on<br>[06:29] where you're see is that um in the is<br>[06:32] that like the sample environment<br>[06:34] variables like where where are you<br>[06:36] seeing that in the repository?<br>[06:38] >> Yeah, I I will send that as well. It is<br>[06:41] on the root repo for the one I just sent<br>[06:44] to you now.<br>[06:45] >> I will send that as well. This is the<br>[06:47] second issue. Oh, Khali is here. Wow. So<br>[06:51] >> 8 right now had So<br>[06:54] we have a I think there's a Docker image<br>[06:57] somewhere. I need to go dig through the<br>[06:59] CI config to to grab the exact name. But<br>[07:02] we basically uh in order to have some<br>[07:04] sort of vague unit tests uh just to make<br>[07:06] sure that pull requests don't break.<br>[07:09] Um, we do I think we have there's a<br>[07:12] Docker image I built quite a while ago<br>[07:14] now that basically is just uh it it's<br>[07:19] basically I took an augur database<br>[07:21] that's basically freshly initialized.<br>[07:23] It's empty but it's schematically<br>[07:25] correct and just shipped it in a Docker<br>[07:28] container. So it's not really best<br>[07:29] practice but at least it's enough to<br>[07:31] have a database to connect to so that 8<br>[07:34] will at least start up. Um,<br>[07:37] so that's what that probably is. Um, I<br>[07:41] am planning to kind of extend that with<br>[07:44] uh some more like to actually have sort<br>[07:47] of a an image that actually has a more<br>[07:50] current database and or actually has a<br>[07:53] couple of small repositories in it. Um,<br>[07:57] so I not 100% sure when I can get to<br>[08:00] that, but that's that's one of the<br>[08:01] things I'm trying to work on it. um work<br>[08:06] on doing soon. Um<br>[08:08] >> so I think if you if you wanted to try<br>[08:10] pulling that image and and using that<br>[08:13] locally that should work and the<br>[08:15] credentials in that sample should be<br>[08:18] valid for that. But that's a that's like<br>[08:20] a basically an empty database. So the<br>[08:23] the credentials don't get you very much.<br>[08:27] Oh, are those credentials real or I mean<br>[08:29] to my knowledge those were just<br>[08:30] placeholders for people to know the<br>[08:33] format for the credentials?<br>[08:36] >> I think they are real. It's just for<br>[08:38] that um I need to double check, but I I<br>[08:42] think they there was a purpose for<br>[08:43] having real credentials in there.<br>[08:45] Otherwise, it would have just put your<br>[08:46] password here.<br>[08:48] >> Um<br>[08:49] >> yeah, but it's also just like a Docker<br>[08:51] image that happened at one moment in<br>[08:53] time.<br>[08:55] Um,<br>[08:55] >> yeah, pretty much. I I've been trying to<br>[08:57] kind of systematic like get that more<br>[09:00] >> Yeah.<br>[09:00] >> like I'd like to have um one of my one<br>[09:02] of my goals for<br>[09:05] um the the more the more augur side of<br>[09:07] this is I want to we already have some<br>[09:10] testing in place that basically will run<br>[09:13] the Docker container for augur and and<br>[09:15] for like three minutes or something in<br>[09:17] CI and look for specific log lines to<br>[09:19] make sure it started up. I'd like to<br>[09:21] build on that and see, okay, can we can<br>[09:23] we also run Augur on a couple of tiny<br>[09:27] repos that only take a few minutes to<br>[09:28] collect and then we can actually make<br>[09:30] some assertions about, okay, this tiny<br>[09:32] archived repo is fully collected in CI<br>[09:36] and we can check the database to make<br>[09:38] sure the data is as we expect. I think<br>[09:40] that's a natural place to like okay at<br>[09:42] the end of that build that Docker job<br>[09:45] build an image and push it somewhere so<br>[09:47] that somebody can just pull down an<br>[09:48] image with like if all you need is a<br>[09:51] good enough augur database with data to<br>[09:53] connect something else to like that that<br>[09:56] I think would be a good purpose of that.<br>[09:58] >> Yes.<br>[10:00] >> But that's more that's I haven't gotten<br>[10:02] to that yet.<br>[10:06] >> Sorry. Is it possible for you to point<br>[10:08] me to that Docker email that you<br>[10:10] mentioned earlier that you said you<br>[10:12] >> working on finding Matt? I think.<br>[10:16] >> Excellent. Because I think that gives us<br>[10:17] an opportunity. We can follow up on this<br>[10:20] like in writing and in the following<br>[10:22] weeks. But like really getting a chance<br>[10:25] to build hygienically from that Docker<br>[10:27] image is a cool opportunity and we can<br>[10:29] think about it a little bit which is<br>[10:31] nice. Um, and then<br>[10:37] from there<br>[10:40] right now, Ernest, do you think you got<br>[10:42] any questions on bringing in the<br>[10:45] foundation stat stuff or do you want to<br>[10:48] give it a pass through?<br>[10:51] Sorry, I didn't get that answer.<br>[10:54] >> So,<br>[10:56] I'm interested in building out with the<br>[11:01] Docker image, but I'm also curious about<br>[11:03] like right now fundamentally for any of<br>[11:05] your pipelines. Are you blocked?<br>[11:08] >> Oh, I don't think we should worry about<br>[11:10] that yet for what we currently have.<br>[11:14] But, you know, when we want to connect<br>[11:16] to instances, yeah, that should<br>[11:18] definitely be the approach.<br>[11:20] Yeah. Cool.<br>[11:25] >> So, I'm I'm noticing I found the um<br>[11:28] Docker link, the Docker image to that<br>[11:31] empty database. Um and RCI is basically<br>[11:35] just adding that as a service to the<br>[11:37] YAML file to the Docker compose. Like I<br>[11:39] think the service name is mock DB and<br>[11:42] and then that's the the image. I'm<br>[11:45] noticing that that's I don't know. I<br>[11:49] don't think that Docker image like that<br>[11:50] Docker image should still be around. It<br>[11:52] looks like it's based in the Chaos or<br>[11:55] so. So, I don't think that would be<br>[11:56] affected by any of the the repository<br>[11:59] things going on in Augur. Um, so that I<br>[12:02] I would say give that a try first and<br>[12:03] let me know, ping me on Slack if you<br>[12:05] have issues uh pulling that or getting<br>[12:07] that to work. Worst case, I can just run<br>[12:09] a a local Docker local augur install on<br>[12:13] my machine on a couple of small repos,<br>[12:15] wait for it to get fully collected, and<br>[12:17] then just push a push an image somewhere<br>[12:20] um with that database if if that would<br>[12:22] help you. Um like I can always kind of<br>[12:24] manually redo this until I have the time<br>[12:28] to actually go and make it an automatic<br>[12:30] process.<br>[12:32] >> Yeah, that makes sense. Thank you.<br>[12:37] Yeah, I just linked in chat what we did<br>[12:40] for the selfmerge like um visualization.<br>[12:43] And so the idea would be that for every<br>[12:46] visualization it would have this like<br>[12:48] this check mark on the eight side of<br>[12:50] each of the steps that need to be done<br>[12:52] to get a visualization<br>[12:55] um merged into eight not and one of<br>[12:58] those steps is the notebook and the data<br>[13:02] science working group. So, it's like a<br>[13:04] subportion of the overall. And so, I was<br>[13:06] I'm going to be creating the issues and<br>[13:09] populating all of them with these check<br>[13:10] with like the to-do list and opening it<br>[13:13] on the 8 site. So, any feedback on stuff<br>[13:15] that I should include or ways to improve<br>[13:18] that process, let me know because this<br>[13:20] would be a good time before I go and do<br>[13:22] a whole bunch of them and then have to<br>[13:23] update later.<br>[13:27] >> Cool. I had a lot of fun building out.<br>[13:30] I'll bring a link for this one sec.<br>[13:35] But building out this clue line<br>[13:37] visualization, it might not be the most<br>[13:39] expected visualization for it, but I<br>[13:41] went and I just like scanned Kubernetes.<br>[13:45] Um, I'll bring up a link to it and I'll<br>[13:48] just uh have it as a reference. But I'd<br>[13:50] love to see more. Like what I enjoyed<br>[13:52] about this was trying to get like a<br>[13:54] minimal visualization of like what<br>[13:58] countries, what jurisdictions are<br>[14:00] consuming and producing.<br>[14:03] Um, so I'll bring that up in uh in just<br>[14:07] a second, but for now,<br>[14:08] >> are you familiar with the country like<br>[14:10] the things that you should be aware of<br>[14:12] when it comes to looking at country data<br>[14:14] just as a<br>[14:17] >> Yes. Yeah. But this is just looking at<br>[14:19] like jurisdiction.<br>[14:21] >> Okay. Um yeah, because we pretty much<br>[14:23] avoid any country analysis like the<br>[14:26] plague so that we don't have to remove<br>[14:28] contributors from specific countries.<br>[14:30] But if you're like analyzing a community<br>[14:31] that you're not pretty much you're as a<br>[14:33] community, you are not responsible to<br>[14:34] know where everybody is at. But if you<br>[14:37] know that somebody is in China or Iran,<br>[14:40] um you are liable to remove them from<br>[14:43] the community. So it is something to<br>[14:45] kind of be aware of when it comes to<br>[14:47] doing analysis on location.<br>[14:49] >> Yeah. Yeah.<br>[14:52] But the visualizations are really nice.<br>[14:54] Does it matter? So what about the<br>[14:56] consuming? So what I'm only able to cons<br>[14:59] look at are like consumption of<br>[15:03] open source like I'm looking at who's<br>[15:05] consuming it.<br>[15:06] >> How are you what are you counting as com<br>[15:09] of consume like a download?<br>[15:11] >> Yeah.<br>[15:13] controversial.<br>[15:14] Um, oh no, I don't mean that in a I got<br>[15:17] that I didn't mean that in a mad way. I<br>[15:19] mean that in like a very literal um<br>[15:21] downloads are very controversial and<br>[15:23] like I like in the overall measurement<br>[15:26] um community whenever it comes to<br>[15:28] because of how much it miscounts like<br>[15:30] that it is a very it could be a a<br>[15:34] misleading metric.<br>[15:36] >> Yeah. Um because it can count like I<br>[15:38] guess but I guess you're looking at<br>[15:39] purely from like a I just want to see if<br>[15:41] a location is is represented rather than<br>[15:43] the scale. Is that what you're going<br>[15:45] for?<br>[15:46] >> Yeah. So like in my consumer class I get<br>[15:49] a lot of questions like okay so is the<br>[15:51] European Union like actively<br>[15:53] contributing to the space or not? So I<br>[15:55] have a line that just shows across all<br>[15:57] the EU known active like consumption and<br>[16:01] that works really well and it's a it's a<br>[16:04] very anonymous aggregate but it did use<br>[16:07] this baseline to get it<br>[16:09] >> interesting. Um, yeah, I'd be curious if<br>[16:13] Don comes back around at certain points<br>[16:16] or talking to Greg because I would say<br>[16:18] um a lot of people who've done who do<br>[16:21] analysis on open source pretty much<br>[16:23] refuse to look at any download data<br>[16:26] including myself um because of the like<br>[16:29] because there's it's a little bit<br>[16:31] different whenever the mis or not even<br>[16:34] the miscounts but if the stuff is at<br>[16:36] scale so it's like oh if in this way<br>[16:37] this could underount in this way and it<br>[16:39] could overount in another way. If<br>[16:41] they're scale-wise similar, then you're<br>[16:43] like kind of like, okay, that's a bit of<br>[16:45] a wash. But the ways in which the<br>[16:47] counting can be done of man, if somebody<br>[16:50] just like sets up a certain way of<br>[16:51] downloading a server in a certain way or<br>[16:54] using a VPN, it just completely ruin<br>[16:56] like messes with the entire like<br>[16:59] analysis. Like very small things can<br>[17:01] like throw things out the window.<br>[17:05] >> Yeah. Yeah, for sure. Yeah. But I think<br>[17:09] uh yeah, I think what I'm looking at is<br>[17:11] like I'm I'm looking for really the<br>[17:14] proof that some like small areas are<br>[17:17] consuming like tribal nations or PBLO<br>[17:19] nations or like<br>[17:20] >> Yeah. You know,<br>[17:21] >> if the answer is like consu consumption<br>[17:23] as a check mark rather than a scale,<br>[17:26] completely agree.<br>[17:28] >> Does that does that make sense? Or<br>[17:29] you're just like saying like this exists<br>[17:31] here rather than like oh because if<br>[17:33] you're trying to compare scale that can<br>[17:35] be a problem.<br>[17:38] No, I don't think so. Yeah, it's a it's<br>[17:40] really not something that would go into<br>[17:42] like a consumer report, but like a<br>[17:44] government is going to be interested in<br>[17:46] understanding how much from their<br>[17:47] citizenship is publicly consuming<br>[17:49] intentionally because it's a government<br>[17:51] platform, right? So,<br>[17:54] >> yeah,<br>[17:56] but yeah, maybe a discussion that we<br>[17:58] should probably have and loop in on.<br>[18:01] >> Yes, I do. I this is a good I'm glad<br>[18:05] like I think that it's good to bring in<br>[18:07] a different perspective of this cuz I<br>[18:08] think that the conversation has just<br>[18:10] been stopped at no we should not do this<br>[18:12] for a while and that might not be the<br>[18:14] correct like I'm I would be very curious<br>[18:17] for you to bring up like kind of like<br>[18:18] show what you're doing analysis wise why<br>[18:21] like you're like kind of backing behind<br>[18:23] of like why this isn't uh like<br>[18:26] misrepresentation of counts as like a<br>[18:29] double negative or like showing why it<br>[18:31] is like valid for this like thing and<br>[18:33] having an open discussion around it<br>[18:34] because this probably was a bit before<br>[18:37] you were involved, but this was like<br>[18:38] this used to be like the topic that<br>[18:41] everyone was talking about all the time.<br>[18:43] Counting like counting download metrics,<br>[18:45] why we shouldn't like to the point of<br>[18:47] like doing a joint um blog post of<br>[18:49] saying we refuse to count as like um um<br>[18:54] researchers in this space, please stop<br>[18:56] asking us to count downloads. Um but I<br>[18:59] like that you have a different idea on<br>[19:01] it. I think it's worth discussing again<br>[19:03] because just because we have been saying<br>[19:05] it doesn't mean that we should.<br>[19:07] >> Well, okay. So, I think I think it<br>[19:09] probably came from a very different<br>[19:10] space and energy and like very much I<br>[19:12] come from this I like I have a<br>[19:14] consultancy with people that never come<br>[19:16] to this room because I'm just in it<br>[19:17] building the things with and for them.<br>[19:19] Right.<br>[19:20] >> Yeah.<br>[19:20] >> And here's what it looks like when<br>[19:23] someone receives<br>[19:24] the little like cog in the wheel of my<br>[19:27] system that is augur. So we'll go<br>[19:30] through first and it'll be like a tribal<br>[19:32] nation a security council and we'll go<br>[19:35] through eight metrics but we'll go<br>[19:36] through everything from hardware to<br>[19:37] software like what do you have<br>[19:40] what do you know you have what do you<br>[19:41] have attestation for like because they<br>[19:43] have federal and state guidelines right<br>[19:45] so we go through all the open standards<br>[19:46] and regulation<br>[19:49] and then if we want to see how like and<br>[19:53] specifically like for a like tribal<br>[19:56] nation very easy to get that if they're<br>[19:58] doing it on behalf of a government they<br>[20:00] have to do it publicly as all<br>[20:01] governments do. So then we can go and<br>[20:04] track that so that we can show what<br>[20:06] percentage of contribution they have<br>[20:08] which is something that they're all very<br>[20:09] interested in. But if that I would be<br>[20:12] interested if like from that frame and<br>[20:14] from that understanding is that<br>[20:15] unethical that is a question that we<br>[20:18] should probably have on another call.<br>[20:21] I wouldn't say the ethics is it usually<br>[20:23] the conversation but it's more of is<br>[20:25] this<br>[20:27] >> do these counts actually give us<br>[20:29] something useful<br>[20:31] because but if you're very you know a<br>[20:34] lot about what are the systems that are<br>[20:36] downloading these files and is it going<br>[20:38] to is a CI/CD system that's calling it a<br>[20:41] bunch of different times or if you're<br>[20:43] familiar with how this data is being<br>[20:44] downloaded or not data but the project<br>[20:46] is being downloaded and the things that<br>[20:48] go into the account that is different<br>[20:50] scope which I think is an<br>[20:53] a better conversation of when is<br>[20:56] download data useful if instead of where<br>[21:00] I think a lot of places right now and<br>[21:02] like the open source analysis space is<br>[21:04] that download data is never useful and<br>[21:07] that might not be the right way of<br>[21:09] thinking about it. Um, and so that's<br>[21:12] that's more of where I'll be really<br>[21:14] curious to see the use ca use case and<br>[21:16] the count and all this different stuff<br>[21:17] because it's just a diff like it<br>[21:19] challenges what has been assumed in this<br>[21:22] space which makes it very interesting.<br>[21:25] >> Yeah. Yeah. Well, what I mean it might<br>[21:27] be an outlier case but I think this is<br>[21:29] an interesting situation of like within<br>[21:31] the Linux Foundation like<br>[21:33] >> yeah that's definitely like<br>[21:36] >> a pipeline that I've built because it's<br>[21:37] been requested.<br>[21:39] >> Yeah. Um, and<br>[21:43] yeah, it wouldn't go into a Linux<br>[21:45] Foundation report. I understand that.<br>[21:47] But if it's an issue to do that under<br>[21:50] this like license and work,<br>[21:53] we should talk about that cuz I'm I'm<br>[21:55] curious. I'm I'm super<br>[21:56] >> there's no license issue. It's more of<br>[21:59] just like from a method like as a like<br>[22:01] from the perception of research like<br>[22:03] myself as a researcher or and I'm only<br>[22:06] speaking for Dawn and um Greg Suckliffe<br>[22:08] because they've spoken like very<br>[22:09] definitively and publicly about it. It's<br>[22:11] not like an ethics thing, but a um issue<br>[22:15] with how like the value of like if<br>[22:18] you're comparing the idea that you're<br>[22:20] comparing apples to oranges and saying,<br>[22:21] "Oh, this this one project or in this<br>[22:23] one place there's a thousand downloads<br>[22:24] in this one one place there's 5,000<br>[22:26] downloads because of the different ways<br>[22:28] that the like their like counts of<br>[22:30] downloads can occur. that the scale can<br>[22:33] be like that doesn't mean like that it<br>[22:35] does not mean anything and the scope of<br>[22:37] it because you think about like the<br>[22:39] different ways that things can be<br>[22:40] overcounted and underounted and the fact<br>[22:43] that those things are not at scale to<br>[22:45] one another. I think I think it's<br>[22:47] probably not too big of a problem<br>[22:49] because this sounds like this was<br>[22:50] probably like a center of report or like<br>[22:52] something that was going considered, you<br>[22:55] know, like a research report or white<br>[22:57] paper. That is a single metric out of<br>[23:00] quite literally over 100 that I look at.<br>[23:04] It's not something that we decisions by.<br>[23:08] Um, yeah. So, I don't think<br>[23:12] I think it's okay.<br>[23:13] >> Yeah. In case you're curious, this there<br>[23:16] is some I I don't think I don't know if<br>[23:18] Don's put out anything, but this is a<br>[23:20] blog post from Oh, wow. That is not link<br>[23:24] not working anymore. Lovely. I'll try to<br>[23:27] find that.<br>[24:09] I think Ki is trying to find the<br>[24:12] >> a link to it. Do we want to I mean in<br>[24:14] the meantime, this is this is definitely<br>[24:16] like a topic that we<br>[24:18] can come back to, but I really think for<br>[24:21] like my use case, it's just like it's a<br>[24:24] use that I've had for Aubra. I've used<br>[24:26] it for other things as well, but um I<br>[24:28] just liked my visualization for it.<br>[24:30] That's all.<br>[24:32] >> Yeah, I would be curious and like I<br>[24:33] guess where does the down are I didn't<br>[24:36] even know that auger got download data.<br>[24:39] >> No, so what I've been No, so what I've<br>[24:41] been doing is I I created a system which<br>[24:43] just says okay for what you already have<br>[24:46] as a security posture, what do you do?<br>[24:48] And then I compare that to what like<br>[24:51] OpenSSF has available for example like<br>[24:53] what are the free and open tools or the<br>[24:55] hardware that you would want to use and<br>[24:57] then giving them the option of like do<br>[24:59] you want to look at the contributor for<br>[25:01] that if you've been contributing because<br>[25:03] these are like groups that have<br>[25:06] identifiable<br>[25:08] names and they're trying to find<br>[25:09] themselves. The needle in the haystack<br>[25:11] is them. So is that a problem? Because<br>[25:14] that's not for a broad audience. That's<br>[25:16] not making a big argument.<br>[25:20] >> Yeah, I guess<br>[25:21] >> I'm not even because if you're using<br>[25:22] auger, I guess can you repeat the end<br>[25:25] like where slash when are you getting<br>[25:27] download data in this because I'm still<br>[25:28] not I don't I think I'm that's what I'm<br>[25:30] >> so on my side here what I what I had the<br>[25:34] only thing that I so that was that was<br>[25:36] the thing where we got off on to<br>[25:37] downloads because I was I was looking at<br>[25:39] that as well. What I have in here is<br>[25:41] just a ring that shows like where the<br>[25:44] like relative geography is for the<br>[25:49] contributors to Kubernetes.<br>[25:51] >> Oh, nice. Yeah.<br>[25:52] >> Is that a problem?<br>[25:54] >> Um yes. um if you're get if you're<br>[25:56] providing that. Okay, now I get um so<br>[25:59] the location data um if that is<br>[26:01] something that you're providing to the<br>[26:03] CNCF um I would recommend blacking out<br>[26:06] any um country that has any type of<br>[26:09] trade embargo with um the US. Um so<br>[26:14] usually that they the two big concerns<br>[26:16] are Iran and um China and so like if the<br>[26:20] CNCF like Kub if Kubernetes knows that<br>[26:24] they have contributors that are<br>[26:26] contributing from China or Iran they are<br>[26:29] liable to remove them but they are not<br>[26:32] required<br>[26:33] to know. So if you do not seek out said<br>[26:38] information, you are not responsible.<br>[26:40] But if you do know that, it is a legal<br>[26:43] liability that you have to remove them<br>[26:45] from the community. So that's everyone<br>[26:48] has gone about doing that. So this is<br>[26:50] like outside of download data, but from<br>[26:52] the contributor data um of how you go<br>[26:55] about making sure that that is not a<br>[26:58] piece of information that the community<br>[27:00] has provided.<br>[27:02] >> Yeah.<br>[27:04] Yeah. Well, I think that's fine. Yeah.<br>[27:07] >> I'm not like bouncing it back to the<br>[27:09] community. I do it in printed reports.<br>[27:13] >> Yeah. Because as long as you're doing<br>[27:14] consumer reports, then it's like Yeah.<br>[27:16] Then you're you're fine. It's just<br>[27:17] something that's like, oh, if you're<br>[27:18] working with like with the Linux<br>[27:20] Foundation, if the Linux found if you're<br>[27:22] working with the Linux Foundation,<br>[27:24] analyzing a Linux Foundation's projects,<br>[27:26] and then that report has<br>[27:28] >> Yeah. Well, it's interesting because I<br>[27:30] thought like Kubernetes would be super<br>[27:31] safe because I thought it would be like<br>[27:33] they've limited their liability and<br>[27:35] really making sure they know who's<br>[27:36] contributing. Um, but yeah, it's it's<br>[27:40] good to just make sure if it's going to<br>[27:41] be in any way public, which is open<br>[27:43] source. So,<br>[27:44] >> yes,<br>[27:45] >> I'm glad we had this discussion because<br>[27:47] that's an angle I did not know.<br>[27:52] Yes, it is a kind of a weird there's so<br>[27:55] many weird corner cases when it comes to<br>[27:57] like data and analysis which is the<br>[27:59] interesting sides of it.<br>[28:01] >> Yeah. And the antitrust but good good to<br>[28:04] know. Um okay,<br>[28:07] I<br>[28:09] want us to move on. We've got about 20<br>[28:12] more minutes. Let's talk a little bit<br>[28:15] about the like next steps of formalizing<br>[28:19] our latest like project repository<br>[28:23] okioscope.<br>[28:24] I think I'm saying that right. Um but<br>[28:28] Ernest you've given a description of<br>[28:30] this before but just give another quick<br>[28:32] pitch and then we are going to talk a<br>[28:35] little bit about like where does it fit<br>[28:37] inside the chaos repository and then<br>[28:39] within that we are going to put in a<br>[28:43] like formal maintainer agreement<br>[28:46] and once we put that in place we should<br>[28:48] come up with a like good way to make<br>[28:51] sure that that is like solid and<br>[28:53] communicated but using that as a little<br>[28:56] bit of like marketing campaign for the<br>[28:58] project to get more contributors as<br>[29:00] well. Um<br>[29:03] so yeah, I'd love thoughts on that but<br>[29:04] Ernest take it away. Yeah. So um we got<br>[29:09] uh the name inspiration from a and he<br>[29:13] says that because foundational staff<br>[29:16] project that we started working on the<br>[29:18] unique value that is adding is that<br>[29:21] instead of measuring individual projects<br>[29:24] that does you know we are now interested<br>[29:27] in how does communication metrics<br>[29:29] reported across different foundations.<br>[29:32] How does it help us to answer<br>[29:33] sustainability questions on a cross<br>[29:36] variational level? So because that's an<br>[29:39] ecosystem level measurement. So we now<br>[29:41] said let us measure ecosystem which is<br>[29:44] what we now call ecosope.<br>[29:46] Yeah, that's pretty much about the Navy<br>[29:49] and um I think that should<br>[29:56] >> Yeah, what makes this interesting for me<br>[29:59] is like we've gotten multi-year data<br>[30:01] from Apache Software Foundation, Eclipse<br>[30:04] Foundation, CNCF,<br>[30:06] and we're at a really interesting moment<br>[30:09] in time with the CRA. We're looking at<br>[30:11] some of their patterns of contributor<br>[30:13] activity.<br>[30:14] um that's going to change because of<br>[30:18] strong regulation from the European<br>[30:20] Union right now on stewards of open<br>[30:23] source. So we're doing this like moment<br>[30:27] like up to this moment in time analysis<br>[30:29] and looking for the signals that showed<br>[30:31] like really positive and robust<br>[30:32] communities which is very cool. Those<br>[30:35] structures are both very different in<br>[30:38] their stewardship of open source and<br>[30:40] very different in their JSON schematics.<br>[30:43] So it's not the easiest but we are uh<br>[30:48] continuing to put those together. So<br>[30:51] with that it's an interesting like it is<br>[30:53] a data science project and turning into<br>[30:55] a dashboard for ongoing uh like<br>[30:59] analytics.<br>[31:02] Are we ready to put that at the like<br>[31:04] project level of the chaos um repository<br>[31:09] generally? And if so, I'm sure there's a<br>[31:11] few lines that we'll have to go to to uh<br>[31:14] ensure that's solid.<br>[31:17] Any advice?<br>[31:22] >> So, is the ask<br>[31:25] the dashboards ready to put it into the<br>[31:27] working group repository under its own<br>[31:29] like top level directory? Is that kind<br>[31:31] of<br>[31:32] >> Yeah, because it's been sitting inside<br>[31:34] of the like the like data repository<br>[31:39] because it started as a data project,<br>[31:41] but now it is a formal project like Don<br>[31:44] is happy to have as a project and<br>[31:45] Earnest is the maintainer. So, we've got<br>[31:48] everything we solidly need to have it be<br>[31:51] active at that level.<br>[31:54] >> Yeah. um putting it in under it's kind<br>[31:57] of similar which we're going to have to<br>[31:58] rename but like similar to how we did<br>[32:00] like the augur notebooks. It seems like<br>[32:02] it would make sense to have like a top<br>[32:04] level directory specifically for this.<br>[32:06] >> Yes. Yeah.<br>[32:14] >> And it has a good name and I tried to<br>[32:16] give it a silly little logo that looks a<br>[32:17] little bit like the chaos logo.<br>[32:27] Yeah. So<br>[32:30] that's the Yeah, that's the ask there. I<br>[32:32] think probably I mean we formalized it<br>[32:35] as an issue for now, but that was very<br>[32:38] much just a draft of like here's the<br>[32:39] template for it. Um<br>[32:44] yeah. So is there anything that we I<br>[32:47] mean I'm thinking of this at the level<br>[32:48] of if there's any more repositories that<br>[32:51] come up and bubble through this system.<br>[32:53] Is there anything that we'd want to do<br>[32:54] at this stage um before creating a like<br>[32:57] project formally uh within chaos or<br>[33:00] anything that we need to do cuz I think<br>[33:01] we've gone through the steps and the<br>[33:03] issue is public. So I think we're all<br>[33:05] right.<br>[33:06] >> Yeah, it makes it easier that we're just<br>[33:08] doing it under this repository rather<br>[33:10] than like opening a new repository for<br>[33:12] another project. Like if the scope grew<br>[33:14] to that size that would make sense, but<br>[33:16] I think this is a better approach for<br>[33:18] like something that's pretty small<br>[33:19] scale.<br>[33:20] >> Yeah. And the nice thing is I think with<br>[33:22] chaos we actually are getting a bit of<br>[33:25] an ecosystem of projects. These projects<br>[33:28] work together. So to keep them together.<br>[33:31] >> Yeah, definitely. And especially like<br>[33:33] with some of the conversations that are<br>[33:34] happening behind the scenes. I think<br>[33:35] there's there's multiple projects that<br>[33:37] are like data science focused projects<br>[33:39] that are um talking about donating to<br>[33:41] Chaos. So, it's going to become which I<br>[33:44] also think is imp with some of the other<br>[33:46] crazy things that are going on there.<br>[33:49] It's not just one person who's<br>[33:50] developing software here. Um, and chaos.<br>[33:53] There's a lot of people at this point<br>[33:54] that are um and so I think that it's<br>[33:58] good that all the things that are kind<br>[33:59] of like orbiting around chaos, the more<br>[34:02] that they are officially under chaos, I<br>[34:03] think um helps in a lot of way build<br>[34:07] reputation that chaos is more than just<br>[34:09] like uh like theoretical like metrics<br>[34:11] community which it I think it has been<br>[34:13] for a while and um prevents some people<br>[34:17] from making some I don't think valid<br>[34:20] claims about a singular person being the<br>[34:23] only software maintainer in chaos.<br>[34:27] >> Yeah, that's uh that's not possible<br>[34:29] under the by lines unfortunately.<br>[34:31] >> So,<br>[34:33] we'll be all right.<br>[34:38] Okay. Uh the next thing that that brings<br>[34:41] us to is the maintainer agreement.<br>[34:46] So, we've drafted a version of this. Uh<br>[34:49] it's had a couple of review rounds. I've<br>[34:51] had a couple of just like nice comments<br>[34:53] from community members on it which I<br>[34:54] wasn't expecting. Um, which is really<br>[34:57] nice. Um, so I think we're ready to<br>[34:59] publish it, make it live, but I want to<br>[35:02] do that after the<br>[35:05] repo is like reinitialized<br>[35:08] at a project level and then immediately<br>[35:11] I will bring in Earnest under that<br>[35:16] and then we'll start searching for the<br>[35:17] next maintainer so that we don't get<br>[35:19] burned out.<br>[35:21] >> Yeah. Um, yeah, I was hoping that Kaio<br>[35:23] would be on the call because we've<br>[35:24] talked about this a little bit and I've<br>[35:25] talked about this with Kyle that that<br>[35:27] would be the hope like there is our like<br>[35:31] that Kyle would be that next maintainer<br>[35:33] to kind of come in um and be more<br>[35:37] involved in this like in this like he is<br>[35:40] involved but become more of a maintainer<br>[35:42] in this repository.<br>[35:44] >> Yeah.<br>[35:46] Yeah, that'd be perfect. Um, so yeah,<br>[35:48] I'll bring I'm I can bring the<br>[35:50] maintainer agreement back in um as soon<br>[35:52] as we have that repo live. But is there<br>[35:54] anything else that we need to cover on<br>[35:56] that or we'll just uh I'll say like<br>[35:58] bring it in on the next agenda.<br>[36:01] >> Yeah, I think it'd be good to bring in<br>[36:02] for the next agenda because I also think<br>[36:04] there there might be um<br>[36:08] are we recording right now? I don't<br>[36:11] >> uh we are but if finish up the agenda we<br>[36:14] can have a chat afterwards. Yeah, I was<br>[36:16] just saying that the maintainer<br>[36:17] agreement might um be nice to adopt in<br>[36:22] other areas of chaos that might be um<br>[36:25] looking for more official ways to um<br>[36:27] solidify maintain<br>[36:29] >> everywhere because this is how we do it<br>[36:31] in cyber security and sometimes cyber<br>[36:33] security is right.<br>[36:36] >> But yeah, if we want to turn off the the<br>[36:38] recording then I I can say more.<br>[36:40] >> Excellent. Is there anything else that<br>[36:42] we need to cover today on the agenda? I<br>[36:45] think we're good to go.<br>[36:48] I think we're set. All right, Adrian,<br>[36:50] you have control of the recording. <!-- deep-read:sections end --> ๐Ÿ“„ **Full text:** ![[Full Document Contents/Articles/CHAOSS Data Science WG, April 7, 2026.md|CHAOSS Data Science WG, April 7, 2026 by YouTube]] ## Highlights - some assertions about, okay, this tiny archived repo is fully collected in CI and we can check the database to make sure the data is as we expect. I think that's a natural place to like okay at the end of that build that Docker job build an image and push it somewhere so that somebody can just pull down an image with like if all you need is a good enough augur database with data to connect something else to like that that I think would be a good purpose of that. >> Yes. >> But that's more that's I haven't gotten ([View Highlight](https://read.readwise.io/read/01kpb5rx1x0m2c8a0m0wr8zy7w)) - Tags: ๐Ÿ‘ป ai highlighted - I think a lot of places right now and like the open source analysis space is that download data is never useful and that might not be the right way of thinking about it. Um, and so that's that's more of where I'll be really curious to see the use ca use case and the count and all this different stuff because it's just a diff like it challenges what has been assumed in this space which makes it very interesting. >> Yeah. Yeah. Well, what I mean it might be an outlier case but I think this is an interesting situation of like within ([View Highlight](https://read.readwise.io/read/01kpb5rx3wt5jzrpam2vwhkseh)) - Tags: ๐Ÿ‘ป ai highlighted - >> Yeah. And the antitrust but good good to know. Um okay, I want us to move on. We've got about 20 more minutes. Let's talk a little bit about the like next steps of formalizing our latest like project repository okioscope. I think I'm saying that right. Um but Ernest you've given a description of ([View Highlight](https://read.readwise.io/read/01kpb5rx6d15ew5hv692qjkbdz)) - Tags: ๐Ÿ‘ป ai highlighted - of >> Yeah, because it's been sitting inside of the like the like data repository because it started as a data project, but now it is a formal project like Don is happy to have as a project and Earnest is the maintainer. So, we've got everything we solidly need to have it be active at that level. >> Yeah. um putting it in under it's kind of similar which we're going to have to rename but like similar to how we did ([View Highlight](https://read.readwise.io/read/01kpb5rxcg1387avg0vbahk77w)) - Tags: ๐Ÿ‘ป ai highlighted - that's the Yeah, that's the ask there. I think probably I mean we formalized it as an issue for now, but that was very much just a draft of like here's the template for it. Um yeah. So is there anything that we I mean I'm thinking of this at the level of if there's any more repositories that come up and bubble through this system. Is there anything that we'd want to do at this stage um before creating a like project formally uh within chaos or ([View Highlight](https://read.readwise.io/read/01kpb5rxk2g19c9e9eb7pmhy1s)) - Tags: ๐Ÿ‘ป ai highlighted - anything that we need to do cuz I think we've gone through the steps and the issue is public. So I think we're all right. >> Yeah, it makes it easier that we're just doing it under this repository rather than like opening a new repository for another project. Like if the scope grew to that size that would make sense, but I think this is a better approach for like something that's pretty small scale. >> Yeah. And the nice thing is I think with chaos we actually are getting a bit of an ecosystem of projects. These projects work together. So to keep them together. ([View Highlight](https://read.readwise.io/read/01kpb5rxt6wh9xapt43t8jqg7c)) - Tags: ๐Ÿ‘ป ai highlighted