←back to thread

Fifty Years of Open Source Software Supply Chain Security

(queue.acm.org)
182 points yarapavan | 1 comments | 07 Apr 25 18:04 UTC | HN request time: 0s | source
Show context
aadhavans ◴[07 Apr 25 18:24 UTC] No.43614405[source]▶
A very well-written piece. The section on funding open source is as relevant as it's ever been, and I don't think we've learnt much since last year.

As the proportion of younger engineers contributing to open-source decreases (a reasonable choice, given the state of the economy), I see only two future possibilities:

1. Big corporations take ownership of key open-source libraries in an effort to continue their development.

2. Said key open-source libraries die, and corporations develop proprietary replacements for their own use. The open source scene remains alive, but with a much smaller influence.

replies(5): >>43614635 #>>43615318 #>>43615592 #>>43616293 #>>43618059 #
1. ozim ◴[07 Apr 25 21:46 UTC] No.43616293[source]▶
I think big corporations will take ownership - well not directly but via paying to foundations and it already is the case.

Second thing is there are bunch of things corporations need to use but don't want to develop on their own like SSH.

There is already too much internal tooling inside of big corporations that is rotting there and a lot of times it would be much better if they give it out to a foundation - like Apache foundation where projects go to die or limp through.