CHAOSS OSPO WG, Feb 5, 2026 - CourtneyR.dev's 2nd Brain

CHAOSS OSPO WG, Feb 5, 2026 ![rw-book-cover](https://img.youtube.com/vi/vVAGNWkQy78/maxresdefault.jpg) 🔗 **Source:** [CHAOSS OSPO WG, Feb 5, 2026](https://www.youtube.com/watch?v=vVAGNWkQy78) > [!note]+ Document Notes > tags: #ospo #chaos #business-models #metrics #open-source #collaboration > author: CHAOSS OSPO WG > source: YouTube > reference: https://www.youtube.com/watch?v=vVAGNWkQy78 > date created: 2024-12-19 15:30 > > # 🏷️ Title: CHAOSS OSPO Working Group - Open Source Business Models & Metrics Discussion >  ## 🧰 Action Inbox - [H1] Follow up on collaboration between CHAOSS OSPO WG and Business Value WG — ongoing strategic initiative #collaboration - [H2] Review repo-sunsetter v1.0 tool for repository archival — released to GitHub Actions marketplace #tools - [H3] Submit CFP for All Things Open by March 31st deadline — speaking opportunity #conferences ## 🧭 Table of Contents - [[#📝 Summary]] - [[#📖 Main Content]] - [[#🗒️ Notes]] - [[#📚 References]] - [[#🗣️ Paraphrase]] - [[#📰 Newsletter]] - [[#✅ Action Items]] - [[#🧪 Hypotheses]] - [[#📊 Methodology]] - [[#❓ Questions]] - [[#🔮 Future Research]] - [[#💡 Implications]] - [[#🧠 Learning Styles Assessment]] - [[#📊 Accessibility Assessment]] - [[#🌍 DEIB Assessment]] - [[#✅ Logical Validity]] - [[#🛡️ DARVO Analysis]] - [[#🎯 Conclusion]] ### 🔗 References - [CHAOSS OSPO Working Group](https://chaoss.community/kb/working-group-ospo/) - [TODO Group Business Guide Repository](https://github.com/todogroup/ospology) ## 📝 Summary - CHAOSS OSPO Working Group meeting discussing business models and metrics for open source - New co-chairs appointed (Natalia and Alan) to support leadership transition - Comprehensive presentation on TODO Group's "Open Source in Business" guide framework - Focus on quantifying business drivers and developing metrics for adoption measurement - Collaboration opportunities between CHAOSS OSPO WG and Business Value WG identified ## 📖 Main Content The meeting covered leadership changes within the CHAOSS OSPO Working Group, with Gary White stepping down for paternity leave and two new co-chairs joining. The main presentation by Carlos from the TODO Group focused on their working group's efforts to create a comprehensive guide on open source business models. The framework identifies key business drivers (adoption, contributions, zero license costs, transparency, public benefit, volunteers) and maps them to various business models like support/maintenance, hosting/SaaS, standardization, and donations. The discussion emphasized the challenge of quantifying business value and measuring adoption in open source projects, with participants sharing practical approaches for burden reduction metrics and risk assessment. ## 🗒️ Notes #### ⏱️ [00:00](https://youtu.be/vVAGNWkQy78?t=0) — [H1] Leadership transition and new co-chairs - Key idea: CHAOSS OSPO WG announces leadership changes with Gary on paternity leave - Evidence: "We have two new co-chairs. So thank you Natalia. Thank you Alan." #### ⏱️ [04:23](https://youtu.be/vVAGNWkQy78?t=263) — [H2] TODO Group business guide initiative overview - Key idea: Working group creating comprehensive open source business guide with dual audiences - Evidence: "The goal of the working group is twofold... community-driven guide... enterprise edition targeted at business decision makers" #### ⏱️ [08:15](https://youtu.be/vVAGNWkQy78?t=495) — [H2] Six core business drivers identified - Key idea: Framework identifies adoption, contributions, zero license costs, transparency, public benefit, and volunteers as key drivers - Evidence: "Adoption is probably the most widely used driver... opens a lot of opportunities in many different ways" #### ⏱️ [12:30](https://youtu.be/vVAGNWkQy78?t=750) — [H2] Support and maintenance business model analysis - Key idea: Classic open source model relies heavily on adoption and contribution drivers - Evidence: "The more people use the open source software you support the bigger your market is" #### ⏱️ [15:45](https://youtu.be/vVAGNWkQy78?t=945) — [H2] Hosting and SaaS model benefits - Key idea: Zero licensing costs enable hosting services for software you didn't develop - Evidence: "You can actually provide hosting for software you don't own yourself, you have not developed yourself" #### ⏱️ [18:20](https://youtu.be/vVAGNWkQy78?t=1100) — [H2] Standardization through open source - Key idea: Transparency and adoption make open source effective for establishing standards - Evidence: "Android... Google established a new standard for mobile operating systems... changed the market dynamic quite significantly" #### ⏱️ [21:10](https://youtu.be/vVAGNWkQy78?t=1270) — [H2] Donation model for funding development - Key idea: Volunteers enable compelling donation campaigns for open source projects - Evidence: "KDE project... has surprisingly the last years really built donation campaigns which were much more successful than I would have expected" #### ⏱️ [24:35](https://youtu.be/vVAGNWkQy78?t=1475) — [H2] Mozilla's purposeful open source framework - Key idea: Mozilla's archetype approach provides practical implementation guidance - Evidence: "Nice document... framework how they run open source projects, how they shape them" #### ⏱️ [27:40](https://youtu.be/vVAGNWkQy78?t=1660) — [H1] Critical measurement challenges identified - Key idea: Three key areas need better quantification methods: adoption, trust/public benefit, strategic value - Evidence: "Measuring adoption... that's kind of the classical problem for open source project if you just give your software away without any control" #### ⏱️ [31:15](https://youtu.be/vVAGNWkQy78?t=1875) — [H2] Adoption measurement complexity discussion - Key idea: GitHub metrics are insufficient; adopters files require voluntary participation - Evidence: "I'm not a fan of like GitHub stars and forks... That still doesn't tell you adoption" #### ⏱️ [34:20](https://youtu.be/vVAGNWkQy78?t=2060) — [H1] Risk and business value matrix proposal - Key idea: Combine good risk (opportunity) and bad risk (threats) with business value metrics - Evidence: "Create those matrix both the business value matrix as well as the risk matrix covering both good and bad risk" #### ⏱️ [38:45](https://youtu.be/vVAGNWkQy78?t=2325) — [H2] Government burden reduction quantification - Key idea: Public sector demonstrates measurable value through time and cost savings - Evidence: "10,000 repositories at an 80% reduction, that looks like 10,000 hours of time that we're saving annually" #### ⏱️ [42:30](https://youtu.be/vVAGNWkQy78?t=2550) — [H2] Security cost-benefit analysis approach - Key idea: Compare vulnerability remediation costs to exploitation costs for ROI calculation - Evidence: "We could spend $100,000 to save a couple hundred million" #### ⏱️ [46:10](https://youtu.be/vVAGNWkQy78?t=2770) — [H3] Repo-sunsetter tool v1.0 announcement - Key idea: Repository archival tool now available on GitHub Actions marketplace - Evidence: "We recently shipped a version one of the tool and it has been published to GitHub action marketplace" #### ⏱️ [48:25](https://youtu.be/vVAGNWkQy78?t=2905) — [H2] Future collaboration planning - Key idea: Ongoing coordination between CHAOSS groups and engagement with academic researchers - Evidence: "Maybe we can reach out to for example the Harvard paper authors... and see is this are we on the right track" ## 📚 References - [TODO Group Business Guide Repository](https://github.com/todogroup/ospology) - [Mozilla Purposeful Open Source Framework](https://mozilla.org) - [CHAOSS OSPO Working Group](https://chaoss.community/kb/working-group-ospo/) - [Repo Sunsetter Tool](https://github.com/marketplace/actions/repo-sunsetter) ## 🗣️ Paraphrase - TODO Group is developing a comprehensive business guide that maps open source drivers to practical business models, with versions for both practitioners and executives - The framework identifies six key business drivers and demonstrates how they apply to common models like support services, hosting, standardization, and donations - Major challenge exists in quantifying business value, particularly adoption metrics, with collaboration needed between measurement experts and business stakeholders ## 📰 Newsletter The CHAOSS OSPO Working Group explored exciting developments in measuring open source business impact! The TODO Group presented their comprehensive framework mapping business drivers like adoption and contributions to real-world models including SaaS hosting and standardization. Key challenges remain in quantifying adoption and strategic value, but innovative approaches like government burden reduction metrics show promise. The newly released repo-sunsetter v1.0 tool helps organizations properly archive repositories. This collaboration between measurement experts and business practitioners is creating practical resources for demonstrating open source ROI. Resources: [CHAOSS Metrics](https://chaoss.community/metrics/), [TODO Group Guides](https://todogroup.org/guides/), [OSPO Definition](https://github.com/todogroup/ospodefinition.org) ## ✅ Action Items #### OSPO - Risk Assessment: develop combined risk/opportunity matrix framework - Business Value: create quantifiable metrics for adoption measurement - Documentation: update practitioner guides with burden reduction methodologies - Collaboration: coordinate between CHAOSS OSPO WG and Business Value WG - Academic Engagement: reach out to Harvard researchers for metrics validation #### Community - Tool Adoption: evaluate repo-sunsetter v1.0 for repository management workflows - Conference Participation: submit talks to All Things Open and Community Over Code - Knowledge Sharing: participate in OSPO virtual conference April 9th - Working Group: establish regular collaboration patterns between related groups #### WordPress - Documentation: apply burden reduction metrics to WordPress.org infrastructure improvements - Community: use business driver framework for WordPress ecosystem analysis - Tools: assess repo archival needs for WordPress GitHub repositories ## 🧪 Hypotheses - Business value quantification requires combining measurable burden reduction with strategic opportunity assessment - Adoption measurement can be improved through hybrid approaches combining voluntary reporting with usage indicators - Risk-opportunity matrices provide better executive communication than traditional ROI calculations - Government sector burden reduction methodologies translate effectively to private sector value demonstration ### 📊 Methodology - Survey design comparing different adoption measurement approaches across organizations - Cost-benefit analysis framework development for open source security investments - Case study collection methodology for business driver validation across sectors ### ❓ Questions - How can we standardize adoption measurement across diverse open source ecosystems? - What metrics best capture the strategic value of open source beyond direct cost savings? - How do we balance voluntary participation in measurement with comprehensive data collection? ### 🔮 Future Research - Development of automated adoption tracking methodologies respecting privacy - Integration of business driver frameworks with existing OSPO maturity models - Cross-sector validation of burden reduction quantification approaches ### 💡 Implications - Practice: Organizations need hybrid measurement approaches combining quantitative and qualitative metrics - Policy: Government burden reduction models provide templates for private sector value demonstration - Education: Business stakeholders require accessible frameworks for understanding open source ROI - Funding: Collaborative working group efforts enable resource sharing across measurement challenges ### 🧠 Learning Styles Assessment Reading level estimate: Grade 12-14 (professional/academic) #### 👀 Visual learners - Present: Business model diagrams, driver mapping frameworks - Improve: Add flowcharts showing measurement methodologies, ROI calculation visuals #### 🔊 Aural learners - Present: Meeting recording with clear audio discussion - Improve: Provide summarized podcast-style overview of key frameworks #### 🗣️ Verbal learners - Present: Detailed explanations of business models with concrete examples - Improve: Add glossary of OSPO and business terminology with analogies #### 🧩 Kinesthetic learners - Present: GitHub repository with practical tools and templates - Improve: Interactive worksheets for applying business driver framework #### 🧠 Logical learners - Present: Structured framework with clear driver-to-model mapping - Improve: Decision trees for choosing appropriate measurement approaches #### 🧑‍🤝‍🧑 Social learners - Present: Working group collaboration with multiple perspectives - Improve: Facilitated workshops for practicing framework application #### 🧘‍♀️ Solitary learners - Present: Self-contained presentation materials and documentation - Improve: Self-assessment tools for organizational business driver analysis #### 🌿 Naturalistic learners - Present: Real-world case studies from diverse organizational contexts - Improve: Ecosystem thinking about interconnected business relationships ### 📊 Accessibility Assessment #### Screen reader semantics - Present: Clear heading structure in meeting notes - Improve: Add descriptive alt text for framework diagrams #### Keyboard navigation - Present: Standard video controls and text content - Improve: Ensure GitHub repositories have accessible navigation #### Contrast and readability - Present: Standard meeting format with clear audio - Improve: High-contrast versions of framework diagrams #### Media and captions - Present: Video recording of full meeting - Improve: Professional captions and transcript formatting ### 🌍 DEIB Assessment #### Cultural breadth - Present: International working group participation - Improve: Include business model examples from diverse global contexts #### Inclusive language - Present: Professional terminology with explanations - Improve: Avoid business jargon that assumes specific organizational contexts #### Representation - Present: Multiple organizational perspectives represented - Improve: Include examples from various organization sizes and sectors #### Psychological safety - Present: Collaborative discussion encouraging questions - Improve: Explicit invitation for different perspectives on business models ### ✅ Logical Validity #### Strong reasoning - Deductive strength: Business driver framework logically maps to observed business models - Inductive strength: Case studies support general principles about open source value - Causal reasoning: Clear connections between drivers and business outcomes demonstrated - Analogical strength: Government burden reduction analogies effectively explain private sector applications #### Fallacies - Survivorship bias: Focus on successful business models may miss failed approaches - Hasty generalization: Small number of case studies may not represent full ecosystem #### Tone of voice - Overall tone: Collaborative, professional, solution-oriented with appropriate uncertainty acknowledgment ### 🛡️ DARVO Analysis - No concerning patterns detected - discussion maintains focus on constructive collaboration and measurement challenges ## 🎯 Conclusion The CHAOSS OSPO Working Group is advancing critical work in quantifying open source business value through collaboration with the TODO Group's business framework initiative. The meeting highlighted both progress in developing structured approaches to business driver analysis and ongoing challenges in measurement, particularly for adoption metrics. The combination of academic research engagement, practical tool development, and cross-working group collaboration positions the community well to address these measurement challenges systematically. ## 🧱 Refactor Appendix ### 📚 Literature Split Pad Purpose: Stage CEE units that become Literature notes. Split level: H3 ### [H1] Open source business drivers map to quantifiable value propositions > [!quote] [CHAOSS OSPO WG Meeting](https://www.youtube.com/watch?v=vVAGNWkQy78) by CHAOSS OSPO WG via YouTube. Published 2024-03-05. Accessed 2024-12-19. > "Adoption is probably the most widely used driver... opens a lot of opportunities in many different ways." Framework identifies six core drivers enabling systematic business model analysis. [view highlight](https://youtu.be/vVAGNWkQy78?t=495#H1) #xref #articleseed ID:rw_ospo_biz_drivers ### [H2] Burden reduction provides measurable government sector value quantification > [!quote] [CHAOSS OSPO WG Meeting](https://www.youtube.com/watch?v=vVAGNWkQy78) > "10,000 repositories at an 80% reduction, that looks like 10,000 hours of time that we're saving annually." Public sector demonstrates concrete ROI calculation methodologies for --- ## Full Transcript [00:01] Okay. So, welcome everyone to the Chaos [00:06] OSBO working group meeting for Thursday, [00:09] March 5th. So, thank you all for coming. [00:12] Uh, we do have a really quick chair [00:14] update which I will add in the notes. [00:16] So, many of you probably remember uh [00:18] Gary who was Gary White who was the [00:21] co-chair with me for this working group [00:23] and he has not been around lately. Um, [00:27] it's for a very good reason. uh him and [00:29] his wife had a baby and so he's been on [00:31] paternity leave. Um so he's just been [00:34] he's just been kind of uh absent and so [00:37] um I talked to him about it a little bit [00:38] and he's he's welcome to come back at [00:40] any time but um it would be nice to have [00:43] some have some co-chairs so that uh I [00:46] don't have to run all of the meetings [00:48] and so we have two new co-chairs. So [00:50] thank you Natalia. Thank you Alan. So [00:54] the three of us will now be will now be [00:56] co-chairing this working group. So, I'm [00:58] super happy to have both of you on [01:00] board. Um, so I'm I'm absolutely [01:02] thrilled to have some new new chairs. [01:04] So, I think this is great. [01:09] >> Thank you. [01:13] >> Thanks, guys. Yeah, excited to be more [01:16] involved in the OSO working group [01:17] meetings. Yes. [01:21] >> Awesome. Thank you. And and part of part [01:24] of what spurred a lot of this is that [01:25] I'm planning on taking uh most of April [01:28] and or all of April and most of May off. [01:32] Um so this was this is really timely [01:34] because I'm definitely going to need [01:35] some people to to run the meeting uh [01:37] while I'm gone. So Alan and uh Natalyia [01:39] have stepped up to do that. So I'm super [01:41] excited and I'll I'll put some notes in [01:44] the in the chair update in the minutes [01:46] uh which I meant to do before. Uh, with [01:48] that I'm going to stop sharing my screen [01:51] and um turn it over to uh Carlas and uh [01:56] you can take it from here. [01:58] >> Yeah, thanks. [02:01] So um I'm here today kind of on behalf [02:04] of the to-do groups uh working group on [02:08] the business uh guide as we call it open [02:11] source in business um and I want to [02:14] share some of the work we have done [02:16] there. um and uh discuss ideas um how [02:21] how to go about it. So on one hand that [02:23] you are aware of what is happening there [02:24] but also that that we get into a [02:26] discussion about um how we could [02:29] continue with with it especially with [02:31] within ion metrics. We had the [02:33] discussion a couple of times but um it's [02:36] not as easy um as as as it um yeah would [02:40] be good um so we we'll get to that. [02:45] I have um [02:47] brought a presentation. So let me try to [02:50] share that. [03:00] So you see my slides now. [03:03] >> Yeah, looks good. [03:04] >> Perfect. [03:06] Good. Um so that's um as an intro um for [03:11] um our discussion. Um so given status uh [03:14] we call it um or this as this aspect um [03:18] we call it the mechanics of open source [03:19] in business um as I said it's a working [03:22] group in as part of the to-do group um [03:25] and um we have started that um I think [03:30] two years ago already um there was a [03:33] proposal to work on that um it came from [03:37] um some discussions we had within the to [03:38] do group about um how we interact with [03:42] business people in our organizations [03:44] and uh we realize that this is often not [03:48] the usual discussion. Um we have within [03:51] our peer group of to-do uh people who [03:55] often have a technical background who [03:57] sometimes have a legal background. Um of [04:00] course there are also people who who [04:01] have a business background. Um but what [04:04] we realized is that um we we sometimes [04:06] lack the material which is tailored to [04:08] this target group and um yeah enough [04:12] people found interest in writing [04:15] something. So we made the formal [04:18] proposal to create a working group um as [04:20] as a subgroup in the tool group to work [04:22] on the open source and business guide [04:25] and the artifact um which is meant to um [04:29] result from that is a white paper on [04:31] open source and business. Uh we have a [04:34] GitHub repository or part of the [04:36] ospology repository here. So I have the [04:37] URL here that's where all the material [04:40] is we have created so far. Um and um [04:43] that's also what I will refer to. So [04:45] what I tell you now you can read the [04:47] details um there in the repository. [04:50] The goal of the working group is [04:51] twofold. On one hand we want to um do [04:55] this communitydriven guide like many of [04:57] the other to-do group guides. um [05:00] basically from within the group um more [05:02] as yeah helper for us to spread the word [05:06] um to define the um the terms we use [05:09] there to write down the concepts um also [05:12] discuss um a bit about how how this all [05:15] fits together. Um so there the target [05:18] group would be more uh people working on [05:21] OSO and related functions. Um but we [05:24] also want to have um another version and [05:27] we sometimes call it the enterprise [05:29] edition of of this uh which is um maybe [05:33] a condensed guide. We we still have [05:35] we'll have to see how how the exact [05:37] format will look like which is directly [05:39] targeted at business decision makers. [05:41] what you could put on the desk of a CEO [05:44] or a CFO or whatever of a company um who [05:49] is interested or at least open to using [05:52] open source um to accelerate their [05:56] business. [06:03] So um the the way how we structured that [06:06] is um we basically looked at two um [06:10] perspectives. Um one is um first we try [06:13] to identify the elements um of how open [06:17] source drives business. That's what we [06:19] call the business drivers. And then in a [06:22] second step and I will show you that uh [06:23] in a second. Uh we looked at business [06:27] model models how these drivers then are [06:30] applied there. And u for the for the [06:34] guide we also the plan is to have case [06:37] studies where we look at concrete cases [06:40] where we can show companies who actually [06:42] have done it using open source [06:44] successfully uh to improve accelerate uh [06:48] their business make their business more [06:49] profitable and also write this down I [06:52] won't talk about that we are not there [06:54] yet at the moment we are at the [06:56] mechanics [06:58] and the business drivers we identified [07:00] there is Um this list here um the one [07:04] which is probably the most [07:08] uh widely used uh driver is adoption. So [07:13] we know that open source is a great way [07:15] to get adoption for for software. Um if [07:19] you have a popular open source project [07:20] this opens a lot of opportunities in [07:23] many different ways. um you can build a [07:26] business on that but you also can um [07:28] yeah give it away for free and do [07:30] something else with it um depending on [07:32] on your actual business model. So this [07:35] wide adoption is one one of the primary [07:37] business drivers. It's also related to [07:38] some others um but this is one we [07:41] identified. [07:42] Um contributions are another driver uh [07:45] because that gives you the leverage to [07:48] actually change the software you're [07:49] using to influence the software which is [07:51] on the market to work with others. So [07:54] this also is a driver which is [07:56] important. Um zero license costs is [07:59] something which is um especially when [08:01] you calculate business case is something [08:04] which can be quite significant. Um if [08:07] you don't have to pay license fees for a [08:09] software this opens up business [08:11] opportunities which otherwise are [08:12] difficult. Um especially for example if [08:15] you're in high volume markets where you [08:17] would have to have a per per device [08:19] license fee. That's where open source is [08:22] really effective and has changed quite [08:24] some markets. [08:26] Transparency and public benefit. The [08:28] these are two drivers which go more a [08:30] little bit um in a direction which is um [08:33] yeah also harder to uh to to get to [08:37] grasp also harder to measure. We will [08:39] come to that at the end. Um but [08:42] transparency obviously is one one of the [08:44] big values of um open source in the [08:46] sense of ethical values but it also um [08:49] has business value in direct terms [08:51] because people can actually verify um [08:54] their trust they they have in you by by [08:57] looking at your code and public benefit [09:00] is similar. Um obviously we have this [09:03] public money public code mantra if if we [09:05] invest public money in code that this [09:08] should be available to society. Um that [09:11] makes a lot of sense but that's also um [09:13] it makes sense from an ethical point of [09:15] view also from an economical point of [09:18] view but that's already harder to to [09:20] explain. Um um but it's definitely um a [09:24] driver which can can be used to also [09:27] take decisions and volunteers. Um um [09:32] it's a little bit of a different quality [09:33] of a driver because it's less an um yeah [09:36] mechanic but more the the people who are [09:38] driving the mechanics but volunteers [09:40] obviously play in very important role in [09:42] open source because they do a lot of [09:44] work um but also because um yeah we have [09:47] to be careful with these volunteers um [09:49] because um they add value but they are [09:52] not paid for it um in most cases. So we [09:56] have to deal with that in a respectful [09:58] way. So also this has to be something [10:00] which is taken into account in uh [10:02] business models. [10:05] So this is a list of drivers um we [10:07] identified and um now let's have a look [10:10] at a couple of examples of business [10:11] models. So this is not meant to be a [10:13] complete list but some examples we also [10:16] used as a starting point to discuss what [10:18] kind of case studies we want to look at [10:21] and the scheme is always the same. Um we [10:23] basically look at the at the business [10:25] model and then see what drivers are [10:26] active there. I have some examples [10:28] there. And the idea is to we could for [10:31] example do something like [10:35] draw a business model canvas um and see [10:38] what what are the open source dynamics [10:40] in this business uh model canvas. Where [10:43] are the connections? We could put some [10:45] errors into that. Um we haven't done [10:47] this work. That's an idea of what what [10:49] we want to work on in this uh working [10:50] group. [10:52] So as an um example um kind of the [10:55] classical open source business model um [10:58] you sell support and maintenance um for [11:02] open source software um there are many [11:05] examples where companies do that um and [11:07] the drivers there uh adoption is um [11:11] certainly one one of the things which um [11:13] is very important there because um the [11:15] more people use the open source software [11:17] you support the bigger your market is [11:19] and the more potential customers are out [11:21] there. So it helps you to make open [11:24] source software um successful even if [11:27] it's for free in terms of license fees. [11:30] Um but um then you have your service [11:32] offerings around that. um the model [11:36] relies on contributions um because if I [11:39] want to support um open source software, [11:41] I need to be able to change that and it [11:44] just would not be economically uh viable [11:47] to do that um without giving back um so [11:51] contributions are crucial element here. [11:55] And the third one um zero license cost [11:58] um that's also um um something which [12:03] plays a role here um [12:08] because it changes a little bit the [12:10] dynamics of the market because as I said [12:12] before for example um in a market where [12:14] you would pay license fees per per [12:17] device um there are zero license cost [12:19] change the change the model how how you [12:22] actually would would sell to customers [12:25] Yeah. And examples, the typical examples [12:28] um are the Linux distributions. Um they [12:30] do this model for for many many years [12:32] and u it has proven to create a lot of [12:36] value for for these companies but um [12:38] obviously also for many of the customers [12:40] they have. [12:46] Then another um also kind of classical [12:48] way to look at that is hosting software [12:51] as a service. Uh so if I have have open [12:53] source software and um I need to run run [12:56] it to be able to use it and it's [12:58] software which is possible or advisable [13:01] or can't be done in another way to run [13:03] as a software as a service then you you [13:06] have to host it. Um there open source [13:09] opens uh up um that that's a zero [13:12] licensing cost driver. um you can [13:15] actually provide hosting for software [13:16] you don't own yourself, you have not [13:18] developed yourself, but um open source [13:21] gives you all what what you need to be [13:23] able to offer that. Um good for [13:25] customers because there's competition in [13:27] the market, but also good for the [13:29] providers because they have um the [13:31] opportunity to do things without having [13:33] to set up a huge software development [13:35] effort. Um and adoption again is a [13:38] driver here which is important because [13:39] that's uh defining the size of your [13:41] market. Again if many people use use [13:44] software um then um and they need a [13:47] service uh need to need hosting or [13:50] software as a service for that um then [13:52] you will have a lot of customers [13:54] um and examples uh we are looking at [13:56] here um WordPress is one of the huge [13:59] examples doing that but also managed [14:02] data services like a is is doing it um [14:06] or one example from a specific domain in [14:10] structure with canvas um that's from the [14:13] um education area. um they they have um [14:16] yeah pretty successful company there um [14:19] which is based on this model and [14:22] obviously cloud providers are doing that [14:24] in a in a kind of general way um they [14:26] offer a lot of managed services um on [14:29] different levels also of management um [14:31] and yeah clearly there is business to be [14:34] made there but it's interesting to see [14:36] that also the discussion there I mean [14:39] how much open source is actually helpful [14:41] for your business model how much open [14:42] source do you need Um is it maybe can it [14:45] also be u um yeah a problem um because [14:49] you have competition. I mean we know the [14:51] discussion about uh open source projects [14:53] which changed their license because they [14:55] think um cloud providers are extracting [14:59] too much value from the market. Um it's [15:02] it's an interesting discussion and I [15:04] mean we don't have a conclusion here but [15:06] it would be interesting to look deeper [15:08] into that and also to look at numbers. [15:10] That's where we come to maybe also [15:12] metrics or at least um value assessment. [15:17] Another business model we looked at is [15:19] um standardization. Um this is something [15:23] um where we often see open source um [15:27] especially successful in establishing de [15:29] facto standards because the software is [15:32] widely available because it's [15:34] transparent because people with [15:35] different interests can can trust it [15:38] because they can see it. they all um [15:41] yeah stakeholders are on the same same [15:43] same level. Um their transparency is an [15:47] important driver um because that makes [15:49] it um yeah easier to establish a [15:52] standard uh because the trust which is [15:54] related to that is kind of inherent in [15:56] the model and uh it's not something you [15:59] have to [16:01] buy or sell. [16:03] Um and adoption again um I think that's [16:06] kind of the recurring theme here. [16:08] Adoption always ex is accelerating [16:10] business uh because the more people are [16:13] interested obviously the bigger the [16:16] market opportunities are [16:19] and um yeah examples we listed here um [16:23] Android would would be one example where [16:26] um Google [16:27] uh established a new standard for mobile [16:30] operating systems in the market changed [16:32] the market dynamic quite significantly. [16:34] Um yeah it would be interesting to to [16:38] also anal an analyze actually how open [16:41] source this uh what what role open [16:44] source plays there. I mean Android [16:45] obviously is open source. Um maybe here [16:48] is also the zero license costs in in u [16:51] in in plays. Um but yeah [16:56] it's it's definitely a dynamic which [16:58] which was uh made possible by releasing [17:01] Android as open source. Kubernetes is an [17:04] an example from from the server um side [17:07] cloud providers um again um for [17:10] customers it's actually quite convenient [17:12] that there's one Kubernetus um which is [17:14] run by all um public cloud providers so [17:19] that I can switch and I don't have to [17:21] learn a different container [17:22] orchestration system when I'm switching [17:24] providers [17:26] um yeah there are certainly more [17:28] examples I also would be interested in u [17:30] yeah ideas you see here what might maybe [17:33] even better examples um how to [17:35] illustrate this business driver of [17:36] sanitization. [17:43] So, and another one um and you might uh [17:48] debate if that's actually a business [17:50] model, but u donations are a model which [17:55] uh quite a number of open source [17:56] projects use to fund their development [17:59] or fund a part of their development. Um [18:03] I think it's good to treat that as well [18:06] because um not business is not always [18:09] done by companies but there are also [18:11] individuals um there are nonprofit [18:13] organizations involved and um yeah [18:17] donations are I think quite an important [18:20] um part of of the open source ecosystem. [18:23] Um there we have the business driver of [18:25] volunteers. Um so one a volunteer [18:28] organization they have a really [18:30] compelling story to ask for donations [18:33] company probably wouldn't uh go with [18:35] that and wouldn't be successful with [18:37] that. Uh but the model here is maybe a [18:39] little bit more on the individual level. [18:41] Uh but it's certainly something which [18:43] drives an ecosystem where also um at [18:47] least part of the community can can make [18:49] a living from uh contributing to open [18:51] source projects and adoption of course [18:54] again defines kind of the size of the [18:57] markets. [19:00] um examples uh Wikipedia is not [19:03] primarily a software project but um I [19:06] think they have probably the most [19:07] visible donation campaign which is out [19:10] there in in the space um the smaller [19:13] ones but still very relevant ones are [19:15] Libra office um they they fund the not [19:19] all the development but they they fund [19:21] the organization and have quite some [19:23] resources there um also KDE project [19:27] which is dear to my heart um has [19:30] surprisingly [19:31] um the last years really built uh [19:35] donation campaigns which were much more [19:37] successful than I would have expected. [19:39] So maybe it's also something which is [19:43] underused. Um you have to ask for [19:46] donations. I I learned to get them. You [19:48] won't get them just because [19:52] it it would be good for you. And I think [19:54] many open source projects are hesitant [19:56] with with asking for financial help. Um [19:58] there are lots of um yeah [20:03] I think dynamics there which um you [20:06] might not like or you would prefer to [20:10] ignore but then still it's it's a it's a [20:12] nice way if if you actually are [20:13] successful with that. [20:17] So that's a couple of examples. I think [20:18] there are a few more in the in the draft [20:20] of the guide. So if you're interested in [20:22] that um look up the document on GitHub. [20:24] Um [20:26] one other aspect we um looked at [20:30] given we have a business model we have [20:32] identified how the business drivers um [20:36] work how we want to apply them to [20:37] accelerate that then the question is how [20:39] do I do that in practice? What does this [20:41] mean for my open source project? And [20:43] there um we looked at Mozilla's [20:46] framework for purposeful open source. Um [20:48] that's actually a nice document. You [20:49] might be aware of that. It's um it's a [20:52] study they did um mostly for their own [20:55] needs. So they have a framework how they [20:57] run open source projects, how they um [20:59] shape them, what is important there and [21:01] they identified these archetypes and [21:03] these archetypes actually map quite [21:06] nicely to this business driver approach. [21:09] So that we have um uh they define what [21:13] they call archetype benefits. Um and [21:15] they are quite close. they are a bit [21:17] more more fine grain but they are quite [21:19] close to what we defi defined as as [21:22] business drivers and from that results [21:25] um um an archetype which comes with [21:28] certain traits how the project should be [21:30] organized how for example it should [21:32] involve community contributions and and [21:34] all that so the document actually is I [21:36] think a nice um um way how to transfer [21:41] this a little bit abstract analysis um [21:44] we we try to do here into a practical [21:47] advice for how to run business projects [21:50] um or how to run open source projects [21:51] with an impact on business um and yeah [21:55] these two slides here just summarize [21:57] that I won't go into detail here um you [22:00] can read that up or we can just discuss [22:02] it in detail if you have specific [22:04] questions [22:07] good um that's kind of the content we [22:10] already have um so you can read that up [22:13] um I did U one more slide here about a [22:17] number of questions actually we also [22:19] discussed and that's where maybe some [22:21] interaction between chaos and the [22:24] working group um would be interesting. [22:27] Um we are having um we had several [22:31] discussions about that but no clear [22:33] conclusions yet. um how how we can [22:35] quantify um some of the things we are [22:38] talking about how how we quantify the [22:40] business impact of these um yeah [22:42] business drivers how can we make advice [22:46] there how how to use them and and also [22:49] track them and how to convert um inside [22:51] there into action um what we do have is [22:55] I mean we have these uh quite well-known [22:57] studies the Linux Foundation has done a [22:59] lot of them others have also done them [23:01] um with this more global view how [23:04] valuable is the open source ecosystem as [23:06] this famous 8.8 8 trillion number um [23:10] which which is cited a lot um um that's [23:13] kind of from the consumption point of [23:15] view of open source. We also just [23:17] recently the Linux Foundation released [23:18] the study about ROI of contributions. Um [23:22] there are a couple of others. I think [23:23] that's also something from a general [23:26] point of view I think it's understood um [23:29] um but these numbers are not not really [23:32] helpful to drive uh action in specific [23:35] projects. So that's where we are asking [23:38] ourselves the question what what are the [23:41] dimensions we can measure maybe what is [23:44] already there what already is measurable [23:46] where maybe there are tools [23:48] methodologies um advice experience [23:52] practice how how to do that and how [23:55] could that be integrated or used [23:57] together with with the framework we [23:59] discussed and defined here and uh three [24:02] things I have in mind where I don't have [24:05] an easy answer is um measuring adoption. [24:08] Um that's kind of the classical problem [24:10] for open source project if you just give [24:12] your software away without any control. [24:15] Um you won't have license keys to count [24:17] or something like that. So how we can [24:20] how can we actually measure that? How [24:22] how can we work with that? Uh it's such [24:25] an important factor in in the business [24:27] models I think but it's really hard to [24:30] quantify [24:31] uh in a reliable way. Um and then we [24:35] have [24:36] In theory, of course, there's a very [24:37] exact number of adoption because you [24:39] could count computers where the software [24:40] is installed if you would know them. Um, [24:42] but then there are also these areas [24:44] where it's much harder to come up with [24:46] numbers because it's not as easily uh [24:49] countable. Um, like what is trust? Um, [24:52] what is public benefit? Um, you can try [24:55] to convert that into numbers, but uh [24:58] public benefit could be measured in cost [25:00] savings or something, but that that's [25:03] not the full picture. Um and similar um [25:06] how do we account for strategic value of [25:09] not open source is uh part of a [25:12] strategic decision um which is important [25:14] but is not yeah directly measurable but [25:18] of course it has an impact and some of [25:19] these business drivers uh very directly [25:23] touch the strategic level. So would be [25:26] interesting to to see how we how we can [25:28] come up with more tangible [25:31] numbers how how to quantify things here [25:34] and I'm sure I have forgotten a lot of [25:35] other things we we could discuss um and [25:39] we we need to discuss. [25:42] So um that's it. Um [25:46] yeah just my email address here. Um, [25:50] that's what I wanted to show you and I'm [25:52] looking forward to our discussion now. [25:58] >> Yeah, that's great. Thank you so much. [26:00] Thank you so much for coming. I've been [26:01] really interested and in what you all [26:03] are working on. Um, sadly your meetings [26:06] are on Friday, which is my day off and [26:07] so I don't I don't come to the meetings. [26:09] Um, but but yeah, I've been really [26:12] interested uh to hear what you've what [26:14] you've all been working on. So I'm [26:15] curious what what other people think. [26:17] Can you go back to the slide with the [26:18] questions about metrics because that [26:20] might be that might be interesting if [26:22] you have other questions for for Canas [26:24] that that's cool too. Um but yeah, so do [26:27] you have any questions about the [26:29] presentation? Do you have any thoughts [26:31] specifically on the on the metrics? I'd [26:33] be curious to hear from from some of the [26:35] other opos. [26:45] I I would be particularly interested in [26:47] this adoption question. Does does any of [26:49] you have found a way how to get reliable [26:53] adoption numbers for open source [26:54] projects? [27:00] >> I wish that's the the million-dollar [27:03] question and open source, right? like we [27:05] have we have things we can use as as [27:09] indicators. You know, you can look at um [27:12] so I'm not a fan of like GitHub stars [27:14] and forks, but you can look at the [27:16] trajectory to get a sense for whether or [27:19] not interest in a project is increasing [27:22] or decreasing. That still doesn't tell [27:24] you adoption. Um, you know what a lot of [27:27] the CNCF projects have started doing is [27:29] putting an adopters file, like an [27:32] adopters.mmd file that people can add [27:34] themselves to, but that requires [27:36] somebody actually going to the project, [27:38] adding themselves to the adopters file, [27:41] and then there are loads of companies [27:42] like uh when I worked at Intel, for [27:44] example, we we um didn't tell people [27:47] when we adopted a project. That was a [27:49] deliberate decision that was considered [27:51] confidential. And a lot of companies [27:53] have a similar similar take on that. So [27:55] yeah, adoption adoption is hard. Uh [27:58] Victor, sorry you've got your hand up. [28:00] >> Yeah. Oh, first of all, that's a [28:01] fabulous uh presentation. Thank you, [28:03] Kas. Um so one thing that's been [28:07] discussed in the business value working [28:08] group um is measuring the business value [28:12] and this article was shared before. Um [28:15] so so I think there's a opportunity to [28:19] create matrix to measure uh both the [28:23] business value as well as the b the risk [28:27] uh because um actually actually because [28:30] I participated in a community called [28:31] spdx uh uh so where we uh there's right [28:35] now we're defining the ontology to [28:37] measure uh risk um however if you talk [28:41] to the executives [28:44] like about Ospo for example what is a [28:47] why do we have Ospo why is open source [28:49] important right how do you quantify that [28:52] other than just say we're good open [28:53] source is great I mean this is [28:55] everybody's doing it how do you quantify [28:57] it with a number that's the question so [28:59] same thing is happening here so what [29:02] what we find when discussing in that in [29:04] SP community is um when you quantify it [29:07] there there are ways to quantify it both [29:09] financially also about like process etc [29:12] and The reason is when it comes to risk [29:15] there are two type of risk uh at least [29:18] for security uh side mostly we we talk [29:20] about the bad risk which is the threat [29:23] basically security threats but what's [29:25] not discussed is the good risk the [29:27] opportunity right for example if you [29:29] have ai [29:31] how do you uh do you need to take on [29:33] aent or or not if you talk to security [29:36] engineer the the answer is definitely no [29:38] because this is not ready there's so [29:40] many things that's just too risky right [29:42] however if you don't do it, but it's a [29:44] it's a great opportunity to create [29:46] something new that's kind of be kind of [29:49] a in the future strategic for the [29:51] company, right? So, you have to take on [29:53] that because it's good risk. Uh same [29:56] thing for business value. Um when we're [29:58] uh I know there's previously there's [29:59] already a a risk profile that could be [30:02] probably kind of revived could be [30:03] combined to create a kind of a risk/ [30:06] business opportunity uh value uh matrix. [30:09] This way we can um the the article in in [30:13] this Harvard white paper it go into a [30:16] lot of the interesting uh stat [30:18] statistics right but the question is [30:21] open source community so far has not [30:23] given them the the data yet how do they [30:26] know what matrix needed right so I think [30:28] the the the first step is collaboration [30:31] between business value working group and [30:33] and this and cloud working group and [30:35] create those matrix both the business [30:38] value matrix as well as the risk matrix [30:41] covering both good and bad risk and once [30:43] we have that we can reach out to [30:45] something um like like this Harvard guys [30:48] and tell okay we have this so is this [30:52] something you need because there's all [30:54] the companies have uh u organizations [30:58] such as GRC for risk management you know [31:00] has [31:02] strategic initiative open source etc [31:04] right how do they um come together to [31:07] make a quantify right adjustment uh [31:10] decision on what what to do with open [31:12] source or not. Right? So by doing this [31:14] we have some solid quantifiable risk and [31:18] business value factors so that the the [31:20] sea level people actually can make [31:22] decision based on that. That's I think [31:24] that's where the value will be for this [31:26] collaboration. [31:30] Yeah, I think that's really interesting [31:32] and in particular I think the um you [31:35] know the risk angle is something that [31:36] that we need to be thinking about and we [31:38] do have we do have kind of a starting [31:40] point for that with some of the metrics [31:42] models that that Gary developed that we [31:44] later turned into a practitioner guide [31:46] which is about assessing viability. So, [31:50] um, that's kind of how we look at some [31:51] of the some of the business risks of of [31:54] adopting open source software, which, [31:56] um, you know, was one one piece that [31:58] Victor mentioned that I think is maybe a [32:00] maybe a starting point for some of the [32:02] metrics that might be might be [32:03] interesting. And Remy, you dropped a [32:06] couple of comments in the chat. I don't [32:08] know if you want to talk about any of [32:09] those or [32:12] >> Yeah, sure. No problem. So um there are [32:17] in our opo in the public sector you know [32:19] uh and of and also within sort of the [32:21] the digital service approach to [32:24] providing uh modernization within the [32:27] public sector we talk a lot about burden [32:29] reduction. So anytime that at scale [32:32] especially if you have a very large [32:34] operation like a government is a very [32:36] large organization with thousands or [32:38] millions of people that work within it. [32:41] If even if you can reduce time by you [32:44] know to do a task by a few minutes or [32:47] hours you can really see just an [32:51] enormous amount of burden reduction. You [32:53] can quantify it very in a very [32:55] straightforward way. So uh if you look [32:58] at some of the links that we posted um [33:00] there's our share it act savings uh [33:02] estimation repository that we shared [33:05] where we just show like hey here's this [33:07] manual process of adding repository [33:09] metadata for your open source projects [33:12] and if we could automate that if we [33:14] estimate on the low end it takes an hour [33:16] to fill that out manually if we can [33:19] provide a tool that's hosted that's free [33:22] that doesn't cost any money you know we [33:24] can reduce that by 80% to maybe 15 [33:26] minutes. And then if there's 10,000 [33:29] repositories at an 80% reduction, that [33:31] looks like 10,000 hours of time that [33:34] we're saving annually, which, you know, [33:36] at this amount of salary rate or [33:40] contractor rate for people to fill out [33:42] this metadata, that looks like x number [33:45] of thousands or millions of dollars each [33:47] year at just our agency, right? So those [33:50] kinds of value propositions really [33:53] resonate uh particularly within the [33:55] public sector where there's a big focus [33:57] on doing more with less and you know um [34:00] using efficient re efficiently using [34:02] taxpayer dollars and resources within [34:04] the government. Um that's a big key [34:07] focus of the administration not just the [34:09] you know historically speaking as well. [34:11] So um that's one of the ways that that [34:14] we can sort of demonstrate value um just [34:17] on like the directly on what the OSPO [34:20] does. And then for a more like okay well [34:22] what have you done with open source [34:24] besides the OSO itself um I posted [34:26] another link in channel that was um for [34:30] hospital price transparency tool. So [34:33] basically uh hospitals because of a [34:35] piece of legislation hospitals have to [34:37] provide a itemized list of all of their [34:40] services and how much they cost as a [34:41] JSON file and there was no standard in [34:45] the legislation for how to do that. So [34:47] our team worked to say hey here's a [34:50] standard for doing it. here's a tool [34:52] where you can validate your JSON and [34:55] then from that we were able to say there [34:58] are X,000 number of hospitals that have [35:00] to host this file if it takes this long [35:03] to compute it or this long to audit it [35:06] uh how much burden can we reduce and you [35:08] know there's a screenshot of the slide [35:10] that we presented at the GW OCON uh [35:12] presentation uh last year um to talk [35:16] about sort of those burden reductions uh [35:18] there's also other metrics like Victor [35:20] was talking about where we talk [35:21] significantly about security and [35:23] continuity risks and those are [35:25] relatively straightforward to quantify [35:27] as well. Um there was a high-profile uh [35:31] hack last year for change healthcare [35:33] that cost $2.8 billion and basically [35:36] brought the entire health insurance [35:37] industry to a halt for a few weeks or [35:39] months. So, uh, when we say, "Hey, here [35:43] are these active security [35:44] vulnerabilities and through a bug bounty [35:46] program for rewarding between $500 and [35:49] $5,000 per vulnerability, IBM says that, [35:52] you know, it costs on average $10 [35:54] million per exploited vulnerability [35:57] uh, times the number of reported bugs [35:59] that we found. You know, we could spend [36:01] $100,000 to save a couple hundred [36:03] million, right?" um those kinds of [36:06] tradeoffs are, you know, we're able to [36:08] point to and say like this is based on [36:11] academic research or this is based on [36:13] actual measurement of how long things [36:14] take to do. And those have been very [36:17] effective at at demonstrating value [36:19] proposition in the public sector and I [36:21] think also would translate pretty easily [36:22] in the private sector because these are [36:24] the same approaches that you would use [36:26] as a bug bounty program in a in a [36:27] private organization or a burden [36:29] reduction for a customer experience or a [36:32] user experience research studies. [36:38] >> I think the burden reduction is an [36:39] interesting perspective. um what because [36:43] that that's a way how how to uh quantify [36:46] things which don't have a price [36:48] necessarily [36:49] um and that's that's something I see um [36:52] sometimes um when we are trying to bring [36:56] open source in business processes that [36:59] having a license uh price of zero kind [37:03] of breaks the system. So if for example [37:06] purchasing departments are incentivized [37:08] by negotiating the price and bringing it [37:11] down, I mean if you start with zero, [37:13] there's nothing you can drive down. So [37:16] your incentive goes out of the window [37:18] and and you [37:20] switch to other things. So um that's I [37:23] think interesting. Yeah. [37:28] >> Yeah. Awesome. Thank you. This was a [37:30] this is a really interesting interesting [37:32] discussion. So, thank you so much for [37:33] for joining us. I will uh I will ask if [37:36] you could add a link to your slides from [37:39] the notes that would be that would be [37:41] fantastic. Uh if you could do that, [37:44] >> I would. [37:45] >> Yeah. Thank you. And with that, we have [37:48] just one more thing on the agenda. I [37:50] don't know, Natalyia, do you want to [37:51] share your screen to do this? Do you [37:53] want me to? [37:54] >> Yes. Uh give me a second. [37:56] >> Yeah, perfect. [38:00] >> Okay. And then let me bring up another. [38:03] Okay, cool. Um, hi everyone. I'm [38:06] Natalia. Last week I uh did a little [38:09] presentation and demo to the working [38:11] group where we talked about archiving [38:13] repositories and I just wanted to share [38:16] um a a very exciting and recent update [38:19] from yesterday. Um but the tool that we [38:22] demoed from last week repo sunsetter um [38:25] we recently uh shipped a version one um [38:30] of the tool and it has been published to [38:32] GitHub action marketplace. Um so I'm [38:35] going to drop the link in chat. Um yeah [38:38] so feel free to take a look. We'd love [38:39] to hear feedback and see if um it would [38:42] be helpful for your organization um in [38:44] terms of archiving and sunsetting your [38:46] repositories. And then alongside that [38:48] based on our work um we added some more [38:53] content to the chaos practitioner guide [38:55] on suns setting repos where we [38:57] elaborated more on um preparing [39:00] repositories for archival. A lot of the [39:02] content is based on the work that repos [39:04] sunsetter does. So for instance, we talk [39:07] about updating documentation, doing a [39:09] security review, reviewing issues, [39:11] change requests, the repository [39:13] metadata, and doing some housekeeping [39:16] before um to prepare the repository for [39:19] review before archival. Um yes, so feel [39:21] free to take a look at the updated [39:24] practitioner sunset guide as well. Okay, [39:28] cool. And that is all I had to share. [39:30] Thanks everyone. [39:33] >> Yeah, perfect. Thank you so much. I'm [39:35] going to go ahead and just share my [39:37] screen briefly again and we can just [39:39] talk about um upcoming meetings so we [39:43] have a few things on the future agenda [39:46] items section. Um Travis, since you're [39:50] on the call, I'm going to uh I guess [39:53] kind of put you on the spot. Are you [39:54] interested in presenting in the next [39:56] meeting which is on the 19th? [40:00] >> The 19th. Um, let me just think really [40:04] quickly about what I'm going to be doing [40:07] that day. I Yeah, actually I to be [40:11] honest with you, um, I'm hosting a [40:14] friend who's visiting from the United [40:15] States. Uh, so that's going to be kind [40:18] of a that's not going to be the best day [40:19] for me. So, um, the week after we're the [40:23] actually, let me make sure. Sorry. [40:26] >> So, it would be the the next one would [40:27] be April 2nd because we do every other [40:30] week. So, it' be April 2nd, which would [40:31] be the day before the Easter holiday, [40:34] which [40:34] >> Okay. Yeah. Yeah. April 2nd is good. I [40:37] don't have anything planned yet. No [40:39] visitors from out of town. So, yeah, I [40:41] think why don't go ahead and put me [40:43] down. And the cool thing is I should [40:45] hopefully have uh progressed more in my [40:48] little side quest at work to do all this [40:51] stuff. So, excited to share all that [40:52] with you all. So, [40:54] >> awesome. Yeah, thank you. I think that's [40:56] going to be really interesting, really [40:58] interesting discussion. Um maybe we'll [41:00] reach out to Emma and see if she's [41:01] available for uh for the next meeting. [41:06] Um any other future agenda items? So [41:08] there other things that we want to talk [41:10] about in this in this meeting that we [41:11] should add to the future agenda items [41:14] section. This makes it easier for uh for [41:17] us co-chairs to try and decide what to [41:19] put on the agenda for for the next [41:20] meeting if we get some suggestions from [41:22] people. So if you have any suggestions [41:24] now uh that's that's totally cool. Um [41:27] you can also drop suggestions in the um [41:29] Slack channel. Victor, go ahead. [41:31] >> Yeah. Uh just a mode of collaboration. I [41:34] know this is not something that we can [41:35] expect to do uh in a in a few weeks [41:38] even, right? It's going to be a longterm [41:39] thing. But uh so between the meetings uh [41:43] obviously offline uh on the slide [41:45] probably will be the best way to uh uh [41:47] continue the the discussion. Uh so will [41:49] we and in the in the business value [41:52] meeting we do have a bi-weekly meeting [41:53] there as well. So what what do you think [41:56] is the from from perspective of people [41:58] in this group? What is the best way to [41:59] collaborate on this topic? [42:07] Do other people have have thoughts on [42:09] this [42:15] possibility is the [42:19] the Harvard paper uh authors uh people [42:22] like because and so when we're talking [42:25] about both risk and business value it's [42:27] usually part of corporate governance [42:29] including GRC you know definitely else [42:32] somebody with is for example [42:34] measuring the effectiveness and uh of [42:37] hospital that must be some some somebody [42:39] in the company must be calculating that. [42:41] So maybe uh like like in the HBA uh [42:45] Harvard case any authors that have [42:47] publication regarding this I think we [42:50] can invite to either one either hero in [42:52] the um uh in the in the business value [42:54] meeting whichever proper uh to uh [42:58] discuss about both business value and [42:59] risk how what's how do they quantif [43:02] because they they have the formula right [43:04] we have we provide them with the matrix [43:06] but what kind of matrix they're missing [43:08] I think that's the proper question to [43:10] instead of we create something and they [43:12] say, "Okay, no, this is not what I need. [43:13] Maybe we should reach out to say, what [43:16] do you think is missing? What kind of a [43:17] is a kind of a question mark for you [43:19] when you're doing this um calculation? [43:22] You're you're probably assuming [43:23] something that you don't know. Maybe we [43:25] can actually give you that clear matrix [43:27] that you need to make those [43:29] calculations." [43:33] >> Yeah, that's a really good point. I [43:34] mean, I think that some of that [43:36] collaboration can happen in the Slack [43:38] channel. So we have um so the the main [43:41] Slack channel for for this working group [43:44] is the one in the chaos slack. So it's [43:46] the WG OSPO um Slack channel. So I think [43:50] that would probably be I would say maybe [43:53] the best place to start some of those [43:55] discussions and then I do like you said [43:58] want really want to continue this [43:59] collaboration between the two working [44:01] groups. So I think certainly when um you [44:04] know when when you all have something [44:07] something new something you're working [44:08] on some maybe some questions [44:11] um about metrics I would say that we can [44:13] you know continue to bring these onto [44:15] the onto the agenda as well. So I would [44:18] say you know don't don't hesitate to ask [44:20] to to put stuff on the agenda. Um and [44:22] that goes for everybody. So just a [44:24] reminder like the chairs try to make [44:26] sure that we have an agenda but anyone [44:28] can add anything to the agenda. um and [44:30] we'll cover as much as we possibly can [44:32] in the in the time we have. So, so don't [44:35] hesitate to just throw things on the [44:36] agenda if there's something that you [44:37] want to want to discuss. So, I I would [44:39] really love to keep that collaboration [44:40] open [44:42] >> for that. I don't want to uh speak on [44:46] behalf of he done a great wonderful job [44:49] covering much more than than uh before a [44:52] lot of improvement. Um so so Augustine [44:55] in the also in that group has has some [44:58] uh additional business value idea. So [45:00] maybe coordinator maybe we can bring [45:04] some initial matrix based on your slide [45:06] etc. um you know that's business value [45:09] and and maybe maybe risk as well so that [45:12] we can have the initial list in a you [45:14] know like a Google doc and then we can [45:15] share with with a matrix kmatrix [45:18] community and then and you can take a [45:21] review and then once we have a initial [45:24] list of uh both business value risk um [45:28] of open source uh ready then maybe we [45:31] can reach out to for example the Harvard [45:33] paper authors for example to come and [45:36] and take a look and present their idea [45:38] and see, you know, is this are we on the [45:40] right track. [45:46] >> Yeah, I think that's I think that would [45:48] be great. So, so let me know when you [45:50] all are ready to do that. So, we are [45:52] we're basically out of time. Um, I saw a [45:55] note in the Slack channel to maybe add [45:57] recaps for conferences. So, Scale and [46:00] Foss backstage uh will have happened by [46:02] the time we meet again. So, maybe we'll [46:04] do some some recaps for those. Uh just a [46:06] couple of reminders. Uh Open Chain and [46:08] Friends is at the end of March in [46:10] Stoutgart. Um if you're interested in [46:12] attending that one, uh ASF's Community [46:15] Over Code is in October in Glasgow and [46:18] the CFP deadline is March 20th. So if [46:21] you want to give a talk there, now's [46:22] now's the time. Same thing with All [46:24] Things Open, it's in October again, but [46:27] in Raleigh and the CFP deadline is the [46:29] end of March. So if you're interested in [46:31] submitting some some talks, uh those are [46:34] good opportunities. There is also an [46:35] OSPO virtual conference on April 9th [46:38] that's put being put together by um by [46:41] Rachel at Punch Tape and so that looks [46:43] like it's also going to be really [46:44] interesting event. Sadly I'll be off in [46:46] April so I won't be there for that one [46:47] but I think that's going to be I think [46:49] that's going to be really interesting. [46:52] Um so with that we are we are totally [46:54] out of time. So thank you all for [46:57] coming. This is a really interesting uh [47:00] really interesting session and so yeah [47:02] so thanks everybody and have a good day [47:04] slashe evening depending on where you [47:06] are. [47:07] >> Thank you. Bye bye. [47:09] >> Thank you. [47:09] >> Bye everybody. [47:12] >> Thank you. Bye bye. [47:14] >> Thank you. Have a great vacation, Don. [47:17] >> Yeah. Thank you so much.  📄 **Full text:** ![[Full Document Contents/Articles/CHAOSS OSPO WG, Feb 5, 2026.md|CHAOSS OSPO WG, Feb 5, 2026 by YouTube]] ## Highlights - So um I'm here today kind of on behalf of the to-do groups uh working group on the business uh guide as we call it open source in business um and I want to share some of the work we have done there. um and uh discuss ideas um how how to go about it. So on one hand that you are aware of what is happening there but also that that we get into a discussion about um how we could continue with with it especially with ([View Highlight](https://read.readwise.io/read/01kpb51babnhhh8494mghnxjcp)) - Tags: 👻 ai highlighted - So you see my slides now. >> Yeah, looks good. >> Perfect. Good. Um so that's um as an intro um for um our discussion. Um so given status uh we call it um or this as this aspect um we call it the mechanics of open source in business um as I said it's a working group in as part of the to-do group um and um we have started that um I think ([View Highlight](https://read.readwise.io/read/01kpb51bajpqk3x5ztkrymfqg5)) - Tags: 👻 ai highlighted - So um the the way how we structured that is um we basically looked at two um perspectives. Um one is um first we try to identify the elements um of how open source drives business. That's what we call the business drivers. And then in a second step and I will show you that uh in a second. Uh we looked at business model models how these drivers then are ([View Highlight](https://read.readwise.io/read/01kpb51bb262kkx2qnh7wfcya4)) - Tags: 👻 ai highlighted - example do something like draw a business model canvas um and see what what are the open source dynamics in this business uh model canvas. Where are the connections? We could put some errors into that. Um we haven't done this work. That's an idea of what what we want to work on in this uh working group. So as an um example um kind of the classical open source business model um you sell support and maintenance um for ([View Highlight](https://read.readwise.io/read/01kpb51bcgpt744wjjna0x8xjs)) - Tags: 👻 ai highlighted - it's an interesting discussion and I mean we don't have a conclusion here but it would be interesting to look deeper into that and also to look at numbers. That's where we come to maybe also metrics or at least um value assessment. Another business model we looked at is um standardization. Um this is something um where we often see open source um especially successful in establishing de facto standards because the software is ([View Highlight](https://read.readwise.io/read/01kpb51bee2t3aeqffm7jfpz0p)) - Tags: 👻 ai highlighted - savings or something, but that that's not the full picture. Um and similar um how do we account for strategic value of not open source is uh part of a strategic decision um which is important but is not yeah directly measurable but of course it has an impact and some of these business drivers uh very directly touch the strategic level. So would be interesting to to see how we how we can come up with more tangible ([View Highlight](https://read.readwise.io/read/01kpb51bkghe7yypdj264rmbbd)) - Tags: 👻 ai highlighted - has strategic initiative open source etc right how do they um come together to make a quantify right adjustment uh decision on what what to do with open source or not. Right? So by doing this we have some solid quantifiable risk and business value factors so that the the sea level people actually can make decision based on that. That's I think that's where the value will be for this collaboration. ([View Highlight](https://read.readwise.io/read/01kpb51brvy54rv6e9jtnkjn1s)) - Tags: 👻 ai highlighted