Open Source Leadership Summit 2018

In an ideal world, a FOSS review is highly automated and done often and early so that any FOSS issues - whether technical, licenses or security - can be caught and resolved as they appear. The OSS community currently lacks review tooling that is compatible with modern SW development practices like using package managers, continuous integration and continuous delivery (CI/CD).

Without this review capability, FOSS projects often are released without clear metadata, resulting in reduced adoption and number of contributions thereby making the projects less successful.

In this talk we present a new tool called OSS Review Toolkit (ORT) that enables highly automated OSS reviews within CI/CD by combining existing FOSS dependency and scanning tools with ClearlyDefined, a platform to discover, curate and share FOSS component metadata.