November 2-4 | Napa, California
View More Details

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for the Linux Foundation Member Summit 2021 to participate in the sessions.

Please note that the schedule is subject to change.
Back To Schedule
Tuesday, November 2 • 12:15pm - 12:45pm
Dependencies, Licensing, and Risk: CHAOSS Metrics and Tools - Sean P. Goggins, CHAOSS Project

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
When managing dependencies there are varying levels of complexity and context. Specifically, this talk will review how the CHAOSS Risk Working Group is developing a set of Minimum Viable Metrics that consider: Direct, transitive, interdependent, and circular dependencies. We then discuss the range of variables that can add contextual dimensions to inform how these dependencies can be measured, and a common language for interpreting them. Repository dependency enumeration (Upstream: Projects that my project depends on) Dependency sustainability risk (possibly an accumulation of Evolution, Common and Value working group metrics) “How active is the project now?” - are commits still being made? If it’s small it might be fine, but larger ones are usually concerning if there’s no commits - Dependency : How many times is a single dependency is referenced - Libyears for projects/libraries my project depends on (total, average) - Enumeration of known vulnerabilities for my project’s upstream dependencies - CVE's & Vulnerabilities: CVE's are a small subset.

avatar for Sean Goggins

Sean Goggins

Professor, CHAOSS Project
Sean is a Professor of Electrical Engineering and Computer Science at the University of Missouri, where his research foci are open source software, and human centered data science. Sean is a founding member of the Linux Foundation’s working group on community health analytics for... Read More →

Tuesday November 2, 2021 12:15pm - 12:45pm PDT
Vintner's Court