 Hey everyone hi, I'm Alex Williams founder of the new stack and this is the fourth year that we have done the open-source program office survey with the Linux foundation and We look forward to presenting these results Hi everyone, Hilary Carter VP of research from the Linux foundation I I just joined the LF in March and Within a matter of days I became involved in this project So so excited to have the resources of the new stack to collaborate and bring this project forward on someone an urgent and timely basis and Chris Anizek One of the co-founders of the to do group and kind of helps spearhead a lot of this Open-source program, you know research and was very thankful when Hilary came on board to kind of take a fresh Fresh look and light You know at it So, you know, I think we're gonna start a little bit with you know, Hilary maybe going over some of the methodology demographics And so on kind of you know the how we kind of thought about and perform the research and then we'll kind of go highlight some of the You know, you know trends that we've discovered and kind of open up with some kind of questions You know for the audience because essentially we are between you and frosty beverages And so we kind of want to be on time and keep things moving. So feel free to Okay, great. So we'll frame our discussion today. We'll briefly discuss the results from the 2021 State of the Ospo survey We'll discuss some of the key findings and really we'd like to have an opportunity to answer you all your questions So that's what we're gonna get accomplished today Thoughts to think about our discussion points What kind of you know, what's the level of learning and understanding about the value of an Ospo and the Benefits that Ospo's bring about what can we do to improve developer experiences what How important is culture as one of the value propositions for the Ospo order gaps and open source practices? What do we do when organizations are not sure where to even begin or have no knowledge about their maturity in the process and These are just some things to think about and by all means, please bring these questions forward later on in the discussion Save them for the end Okay, so our methodology we Created a survey earlier in the spring and we translated the survey into Chinese and Japanese for the first time in four years Which was great and we got a good response from those language speakers and help diversify the reach of The survey and it's a practice that we like to do as often as we can because while people may speak English well The ability to answer effectively and capture more accurate data is always made better when you're answering a survey in your native language So we were really pleased to be able to do that Our respond is to survey a good chunk are our developers 20% from IT management including representation from the C-suite CIO CTO and so on and a Good third of the respondents work for large organizations so June 10th the survey went into the field and We distributed the survey primarily to email subscribers at Linux Foundation This went out to about more than a million Subscribers, and we had an incredibly solid response rate. We had 1,141 completes and of that data set there was maybe one result that was deemed unacceptable So a very high quality Respondent community. This is a very engaged space whether they're knowledgeable about osmos or not They really took a lot of time and consideration on how they completed the survey very high Satisfaction with that data Yeah in terms of our responses what what the survey is telling us is that tech companies represent Again just over a third of our responses, which is slightly lower than in years past, which is actually a healthy signal the fact that People are participating in the survey from outside the tech sector Speaks to the reach of osmos into other industries Including industries like education financial services government and so on the kind of brick-and-mortar Institutions that are becoming more involved in software and having to confront digital transformation. So that was a really good sign and Universities of the education were more than half of those Who who indicated that they were from academia? So in terms of organizations Where organizations are on their Ospo journey primarily it is around the consumption of open source And that is a finding that's very consistent with other surveys that we've done so far at the LF certainly in financial services There's a lot more activity in the Ospo Retaining to consumption than there is around contribution or culture or other aspects of collaboration Well, the 2021 data seems to just slightly drop in terms of activity By each of the top variables over the past four years what we see is an interesting trend at the bottom where those who are Maybe not involved in open source or don't know where the organization is is actually increasing and again that speaks to the fact that open source is reaching new industries and participants are Interested enough to answer a survey, but they're not quite sure where their particular institution stands in terms of Ospo maturity so quite an interesting result there and I guess we'll hand it over to me to talk a little bit about some of the you know I think from our opinion key findings that we've you know Distilled from the survey I mean there's there's definitely you know a ton of questions that you know that were part of the survey But to kind of make things a little bit easier and fit in the you know 20 minutes or so we have here I'll kind of cover it so, you know, we generally ask folks to kind of you know What do you think you're a top Ospo? You know generally responsibilities, you know, you know traditionally sometimes, you know For people it could be compliance it could be managing culture and you know, you know Obviously from this kind of list you could see that you know culture you know made up a huge You know a chunk of you know Ospo, you know responsibilities Compliance, you know makes a ton of you know sense, you know if you know the dominant Aspect of an Ospo is to assume that you can easily consume open-source software You're gonna need to ensure that you're compliant, especially if you're distributing the software You could definitely run the issues I think you know if you look at back at like kind of the early Ospo's that were created a lot of them were heavily focused on Legal compliance ensuring all your ducks, you know on a road to ensure that you know, you know We are being good open-source consumers and so on You know, there is kind of this You know trend of people building products and open-source and so on so that's definitely kind of a focus on you know understanding You know how to you know properly use open-source in a commercial, you know setting other kind of interesting, you know a trend that we kind of you know see I think in the data is this whole notion of Tooling for Effective open-source you show and generally what you know for me that that maps to you know Essentially something called developer efficiency or developer productivity. You want to make sure that developers could use and consume open-source You know, you know take part and you know add things to kind of the workflow without kind of going through a laborious You know process and you know, I'm you know, I'm talking to a lot of you know companies that are trying to sometimes figure out You know, you know should my Ospo kind of live, you know They're creating these new like developer efficiency, you know teams and like should my Ospo kind of live there and help out There so you know, this is I think kind of fairly, you know standard what we've seen You know historically, you know to be kind of the you know top five, you know Ospo responsibilities But it tends to be very multifaceted depending on what type of company, you know, you know are if you're just you know Simply not, you know shipping, you know are distributing devices or anything like that You're gonna have different kind of responsibilities for your Ospo than someone that is just simply consuming Open-source software and maybe offering a service and not actually shipping physical devices Yeah, anywhere sure Yeah, I mean Why so your because what yeah, so as I said business alignment Business school alignment Yeah, so I mean I think that given this this survey like, you know, we you know It hit a larger audience of different folks So, you know, maybe you know, that's why it has not Been the dominant thing. We've we've hit new languages new cultures and kind of new, you know sets of institutions educational You know government, so maybe they have a different philosophy here where you know If you're an academic or government, maybe you're aligned between what the business wants is not as important I don't really know like it is something interesting to You know to point out, but you know, I think this is kind of a Feel that is you know evolving right, you know You had Ospo's that you know had a very specific purpose in the early days for corporate for corporations and things have kind of evolved now Where like there's companies companies that are kind of being formed around open-source projects. You have academic institutions You have Governments declaring that you know in the EU that there'll be Ospo's there So I think there's just a lot of different You know attitudes going on and we actually may you know have to potentially evolve this survey to kind of you know Crosscut amongst these different concerns. Oh Just upon reflection of past surveys that we've done we did find that increasingly engineering organizations are leading the Ospo's and So that may affect in some degree how Ospo's reviewed overall I think it's something we may want to explore further down the room So in terms of Ospo, you know benefits It's like, you know at the faster time the market we could reuse stuff cheaper, you know kind of common things We're all familiar with All these kind of work kind of close enough that you know, there's really no standouts But you know essentially awareness of Just usage of kind of what we're using in companies is a top thing a lot of times I talk to organizations Especially larger ones. They truly don't know what necessarily they use across an organization, right? Things tend to be siloed they do lead a tendency that Ospo basically acts almost as like a Software archaeologist to kind of come in and kind of understand like what the hell are we actually using are we compliant with all these things? And so that seems gonna be a kind of a top benefit that you kind of help someone index You know all all these things and you know other thing around culture change you know, especially for you know Sometimes you know working in a specific part of the tech industry you kind of get biased of how you know things work But if you go talk to a traditional Institution that's like, you know Transforming to become like a software company. It's a cold completely type You know different type of world so for them, you know changing the culture of their organization to kind of be more softer You softer first, you know open-source friendly is kind of a big thing because they're just maybe their hardware company Or they built, you know certain that they built cars and they don't get how software works So I think culture is kind of a big thing that Ospo's are Helping it with one of the benefits So, you know, if you look kind of you know at the data here who's kind of who's got an Ospo You know, I see some people in the room here that are involved in an Ospo's But generally, you know that the kind of tech and you know telco industry communications seem to Kind of be the dominant players financial services I think historically has been to doing a pretty good job and I think part of that, you know Has been a certain segment of the industry kind of has been early buying into like Linux and open source as a way to kind of innovate against You know their peers public sector is something we're hearing more and more, you know from there's a lot of interest their Education which kind of you know lumps in you know academic is you know kind of getting grow but you know overall like all this Shows to me is you know just traditional tech companies are still kind of at the forefront, but there's still a lot of potential opportunity You know for for you know growth for for you know open-source offices across You know the the industry and you know when I talked to a lot of folks I try to You know always bring up the analogy is like, you know You know people may not believe this but you know There was no such thing as like a CISO until like 1995 right like until something, you know happened so Poorly for for Citibank that they didn't go hire someone to kind of solve this problem It was kind of a reactive thing and we're seeing more and more companies becoming proactive about this understanding that holy crap You know we need to become you know more of a software company We need to know how open-source, you know works because that's the de facto, you know way software is generally built You know these days, so I expect to kind of see this increase over time And I think part of that is just you know having you know groups like a to-do group and other groups out there educating You know organizations companies that this is something they could do providing playbooks and resources So of the people that generally have you know You know ospoes, you know like how did that? How do people view? The you know how how an ospo is going to critically successful to their kind of organization this actually kind of you know Rose this year which is kind of good, you know data, so I think you know about 63 percent You know of folks kind of find their Ospo extremely critical to the success of their product and engineering organizations And I think you know as you know this kind of field it matures in the industry I think will continue to kind of you know see this increase, you know over over time Another like basic question has your open source improved the positive impact of your company's software practices, you know Generally kind of like, you know, roughly, you know the same as last year maybe a little bit down But you know seventy seven percent of organizations basically like this has improved how I do Development and a lot of that time could be around things like I said just understanding what teams are like building and consuming and Sharing that information across different teams using more modern, you know different software options. It's just You know ospo's generally help organizations improve their collaboration and developer efficiency from from my experience And I think we you know Sometimes, you know, we had some interesting kind of like quotes and You know commentary from folks of kind of like what has the Ospo kind of done, you know for you One of them is like just streamline, you know license compliance and so on so you know instead of kind of you know Building stuff your own or forking projects and Ospo kind of helped them You know kind of really figure out what they're actually Shipping and improve their compliance process. This is kind of like, you know, I think step zero step one of what generally an Ospo does You know for you know for for folks Another thing was around code quality so, you know You know Ospo's generally act as bridges between potentially different teams I mean I didn't talk to each other and so just the kind of impact of creating these kind of you know Bridges improve, you know documentation and collaboration and just improve the the quality, you know level overall Another kind of interesting thing is again, everyone's kind of familiar that we're in kind of a once-in-a-generation I think recruiting market in the tech industry and you know You know this kind of quote, you know came from An organization that you know communication has improved it's kind of helped we you know with recruiting You know shorter time the market for people to get onboarded in the organization based on you know the help that they're Ospo You know provided And we kind of have a bunch of these overall, you know quotes that you kind of pull from the raw data that we published On on get up. I think it's the final final bit So, you know does your organization use its Ospo as a way to kind of do partnerships and business development? You know about a little over half You know say that they you know generally rely on their Ospo to kind of build Partnerships with other organizations and that's generally kind of a natural I think for a mature open-source program office They're generally handling things like alliances business development sometimes to kind of further the goal of the organization I do think it's kind of one of the you know good benefits of what an Ospo could provide for an organization being at an event like You know potentially this you know building bridges. This is something an Ospo could definitely You know help with so What can you know From my kind of point of view and kind of you know us you know on this you know You know folks involved here with this talk is you know, it's still early days I think with the Ospo movement not you know a lot of companies generally may not even have what they Call an Ospo, but it may be like you know one person or half person kind of helping You know saying like we need to do something to improve how we do development how we do open source Like it's impossible to go open source something. How do we make this you know better? So, you know, I just think there's a lot of opportunity for this kind of practice to grow And I think part of that is a talking about it providing examples that people could follow templates job descriptions And just you know you basically have to you know create this kind of you know You know job, you know just description, right? You know like I said see so doesn't exist, you know You know till 95 and you know, this is something that I see over time, you know, Ospo's will eventually kind of follow that same same pathway Kind of you know other things like this I think part of the supporting work that we do at LF research and certainly at the new stock is to provide the evidence and the data and the discussion that leads to better education among senior decision makers to provide the support the resources the staffing count and you know Help bridge that gap and understanding so that the Ospo can become more of a pervasive and and corporate structures You know, it's a bit of a fascinating discussion in many ways because like you know, how do how does like a how does a job? You know Category get created right like you know like develop relations that kind of didn't exist for a while now It's everywhere, right? So, you know, but that's still not really well-defined There's not like a really well-trodden career path like does DevRel live in marketing does DevRel live in engineering? It's it's you know It's this similar thing is kind of happening, you know Here where we're trying to like flush this out provide some guidance to the industry write down best practices and kind of get everyone You know involved in collaborating kind of building this this this career path The only thing I wanted to add is that even to attend a conference like this we have a section on events Which is convince my boss So maybe we need to convince our bosses as to why we need to rethink The formation or the expansion of the Ospo So I want to leave time for questions. So we definitely We're about five minutes away from frosty beverages. So maybe we have time for a couple questions You know for folks from the audience. I you know, I'd love to kind of You know get some feedback from folks and if people want to kind of chat about like, you know After this talk about like how how like job categories of jobs are like created in the industry like you know Like things like DevRel Ospo is like please pick my ear at it because I'm fascinated of how we could kind of do this do this better All right, it seems that successful open source communities are Microcosms of what it takes to have productive collaboration and they manage their own education governance communications and funding y'all alluded to The education industries government telecom and financial industries adopting Ospo's at the beginning of the Presentation I'm wondering as that continues How do you see the future of open source? in Society coming together Yeah, I mean, I that's not even how to like answer that outside I think like, you know, it's kind of like how software was kind of very niche and like software now is like pervasive It's literally like everywhere. It's in you know, your phones to TVs fridges microwaves And it just becomes a fabric of society and so things like educational institutions Governments need to have policies education. I just think it just becomes you know Like you have the kids need to learn how to potentially program and how to collaborate, you know with open source projects How to work together. I just think it just becomes, you know, part of society, but like that's not a good answer I'll expand to say that the competitive landscape has required organizations like They'll take academia. There's a lot of competition for online learning and so if universities and colleges do not transform and fast-track to digitization they will potentially become profoundly disrupted and COVID-19 has accelerated the path to digital by Approximately five years. So it's not really a surprise that some of these industries might feel that threat from fast digital transformation and need to rethink their digital strategy holistically and open source is a vital part of that So I think that's what we're seeing on the whole is this rapid transformation to digital and Governments enterprises having to rethink old business models and how they create value for the communities whether the students Customers and others and and we're all digital now So there has to be a digital strategy and open source has got to be part of that. Yeah Yeah, and it's kind of interesting where you kind of see some of the stuff happening in you like universities and governments at least kind of parallels what early, you know, why some of the early tech companies, you know Favorite open source and had ausposes like just simply something around like software procurement, right? You know, sometimes companies decided, you know instead of me Contracting like and just basically having other people build everything that I need for for my company I want to bring that in in-house. It's you know kind of examples like a capital one like a bank It's like they're like well we used to just contract, you know outsource to have everyone else do it But that's actually not helping us, you know, stay competitive. We need to bring that potentially in-house, you know build You know build our own software teams I think you're seeing that happen in in academia and government or they're like, maybe we just don't need to buy all this Commercial stuff fed by very large companies. Maybe we need to do some of this, you know in-house Or maybe we could potentially find an open-source, you know Friendly option that will allow us to stay more competitive than makes me tied to one specific vendor I would just like to add that you know at the news stack one of the things we do is we focus on at-scale development Deployment and management and we've been doing that since 2014 and That really kind of came on the heels of seeing the rise of the container infrastructure and how that basically Dig transform how we thought about scale how it could be more packaged more easily, you know since then we've seen such a rise in open-source and Over the past year has been such a sea change, you know for us I mean for everyone in this room and in that sea change what we saw last year like we couldn't we had the hardest time actually getting a sample size for For the survey results people were just kind of like just trying to find their bearings But when you come I mean one of the things it really has been has struck me when I came, you know here for The open-source summit is how much interest there was and for instance like Sophia your presentation on on on measurement Right and how you measure your open-source contributions. There's still so much We're needing to learn not just about open source but out about scale itself and that's starting to have a real big effect on like How people think about rare diseases and how you treat them and how do you think about that? Market opportunity if the big farmers aren't you know aren't really adjusting the problem I like take the one less another question I was wondering are you playing you do a Phase two survey where you do a deeper dive? Particularly with organizations that already have ospo's I'd be so curious to find out. I mean there's such a variety of yeah, how ospo's are organized like how large is your Ospo, who does it report to is it you know the head of engineering or is it legal compliance and Are your the members your Ospo full-time devoted to the Ospo or they part-time devoted and those types of questions So you know over the four years. We've been doing this. We've kind of added some questions I think over time. I think you know I think last year We maybe we may have added like where does your Ospo potentially report up to I think this year We added how many potentially employees or you know full-time full-time folks are involved So like some of that data is there, but like we rely on community input like you know I was gonna say like you know we do this every year We kind of a planning cycle and we basically use github like if you want to open up an issue modify a question kind of work with us and You know just please improve kind of this you know this this research that we're kind of doing here And the idea of about maybe like a targeted micro survey for like existing ospo's is a great idea You know, maybe I'll talk to Hillary to see if we kind of do you know Maybe you know I call it a micro survey, but we kind of see you know what we kind of do We can I've enabled that because that is an interesting You know thing and I look forward to working with Hillary to name that all right one two more questions and then frosty beverages I've been when I've been talking to companies about ospo's this year. It's actually been far more about security That has been the bigger driver than compliance or almost anything else Did you happen to see have any findings about security your comments? And if not, I think that'd be a great question to add, but just wondered if you had anything that spoke to that Yeah, I have to go actually look at it up upfront. Yeah It's kind of a you know, the security thing has been a bit of an interesting issue with all the kind of Issues and that have happened recently in the US cyber security order that happened recently that kind of caused a spike in You know a severe interest everywhere around security historically the results show that There's there's a shift going on from more about compliance and being it a responsibility of the legal department send more responsible responsibility of the engineering You know part of the organization and part of that is in terms of what the capabilities are of the tools now for instance scanning images, you know as an example and so That has been turned over more to the developer teams and the engineering teams as a result because a lot of us now becoming automated now Obviously, we're seeing a much deeper concern about the software supply chain here And I expect there's actually I was talking to someone the other day at the Linux Foundation. I said how many You know, how many how many security? Related open source organizations are there in the LF and they said basically Twice as many as last year and in and like far more than that than two years before so Topic to everyone gets a security project. I mean, it's interesting security generally. What's up? Who is the last person at the question? Did you who had her hand up? Okay I think the thing with security by the way, it's like it slows people down generally, right? It doesn't improve their efficiencies, which is hard to deal with but let's look at your question and then we'll so you had the different industries Do you ever publish it with just by industry the answers they get because we haven't but we have the data It's like there's a raw CSV on on github essentially and you we go do that analysis I mean, I think one interesting thing is to kind of do some deep dive Analysis of like hey, maybe just like let's go target of how things are in the financial industry versus telco versus versus tech And it's hard because what's what's happening is like, you know I don't know whether like the person that cements a survey from capital one considers them a financial company or like a tech company now It's like this weird thing that's happening to that. I think kind of muddies Some of some other results, but yeah, one would say they're a tech. I don't like it. No, they're financial company I think it'd be a little more helpful for me to see related companies and how they respond to these questions Yeah, they will take that and I think that I think the idea that at least the suggestion is Deep dive analysis is super useful for for a lot of folks Yeah, and the data sets being publicly available That's something that we will continue so that you can't download the CSV file and play around with it and and see What insights you can come up with and by all means share findings back with us Yeah, eventually, maybe we'll kind of have some kind of like automated like notebook or something that we could share and people Who kind of play with all on their own right now, you know a raw see if CSV dump is not super Useful, but you have something to get yourself started with Nope one more question and then let's break So I saw the initial Like track of things and it seems like there are a lot more people consuming open-source software than contributing to it And so I'm wondering if like what what is the benefit for the company to contribute to open-source software? I mean besides the obvious utilitarian like, you know software needs to continue so contribute to it Like is there more of a substantial benefit? Yeah, I mean there's some research that's kind of been published, you know I think you know I on the 2d group we have I think if you go to like github.2dgroup.org 2dgroup slash research, maybe we list kind of bunch of you know things in papers where like, you know, what benefits people get from contributing, right? You know, there's some things around, you know, you you're able potentially to stay up to date with, you know any security issues you kind of have you know this this whole You know if if you don't contribute to critical projects that you truly depend on your business You may lose the ability to steer them to benefit your business down the line and there's been research done with like folks that have contributed Linux kernel and how they've benefited from but I think we have a list of kind of you know papers But it's going to be different from you know for You know for everyone depending on what their organization is I mean there is kind of this weird Common, you know good thing that sometimes happens for some some projects But yeah, I think look at the research that we have highlighted and kind of I just add one thing the results Do show that the companies that just begin using open source And they begin thinking more about how opens was placed in the organization The more they use it then you start to see them thinking about participating in projects And then the last step is where they actually the crater project to start contributions And there's been more of those people out of Ospo's definitely Contribution is significantly higher to two projects Then then then then vote then organizations that don't for sure All right, I think we're standing in between people and beverages and thank you for coming here and