Business Success with Open Source

Software Supply Chain Awareness Is Growing

Because the ad hoc method of FOSS acquisition is so common, most companies have a surprisingly large number of invisible links in their software supply chains. It’s easy (and somewhat valid) to point an accusatory finger at programmers, scolding them for introducing those invisible links, but companies should also turn that finger on themselves. For too long, companies have overlooked their software supply chains, taking them for granted and, for the most part, lacking awareness that an SSC exists or is something that requires maintenance. If a company is setting an example of disregarding its SSC, it can hardly blame the programmers it employs if they follow suit.

This is starting to change, largely ...