mehl.mx/content/blog/2024-03-open-source-risks.md

title, date, categories, tags, headerimage, headercredits

title	date	categories	tags	headerimage	headercredits
Managing Risks in Open Source without Ignorance and Fear	2025-03-24	english	ospo	/blog/file-cabinet.jpg	Neatly organise your records

Historically, a lot of effort in the sphere of Open Source Program Offices has been spent on two things: getting accurate data about the exact usage and metadata of third-party Open Source projects and getting data about risks attached to it. Today, the barrier of creating proper SBOMs has become somewhat low and there are countless metrics that point to potential issues, and what we see is quite frustrating: a huge pile of measured problems which are hard to impossible to fix in practice. Let's explore some actionable options.

[!INFO] Warning: This operation will delete all data.