Open Source Summit North America 2025

Funding a security initiative can be a game-changer for open source projects, but what does it really take to make it successful?

In this talk, we’ll share insights from a funded security audit in FreeBSD—how we secured support, scoped the work, engaged the community, and navigated challenges. You’ll learn how to evaluate if funding is right for your project, what to expect from the process, and how to collaborate effectively with sponsors.

Whether you're considering funding for security, sustainability, or growth, this session will equip you with practical takeaways to make it a success.

The EU Cyber Resilience Act (CRA) aims to safeguard European consumers and at first glance it targets only the EU market. But in fact the entire OSS ecosystem falls under its scope, which could be scary not only for Manufacturers or Stewards, but also is seen harmful for Individual Developers. Let’s debunk some of those myths! To preserve CRA’s positive intention, we as a community work hard to make sure its implementation incentivizes contributors to become good Open-Source citizens.

During this session we will explore how CRA impacts all players in the OSS ecosystem and why Maintainers MUST keep going with their brilliant work and shouldn’t be afraid. We will discuss what we at foundations and various expert groups are doing to help the open-source community navigate the actual requirements, as well as what standards and tools are available right now, followed by useful examples. They will include templates, samples, checklists, good practices and ideas how YOU can leverage: open-source tools like Security Scorecard, GUAC, Trustify, Minder, a few others; frameworks like Security Base Line and C2C2F; standards like OpenVEX; collaborations like Global Cyber Policy WG.

The traditional view of open source sustainability often frames it as a choice: business value OR public good. We argue that this is a false dichotomy. Bloomberg's Open Source Program Office and Corporate Philanthropy team have partnered to develop a new template – one built on the power of "AND."

This presentation will explore how combining business value AND philanthropic impact creates a transformative approach to open source leadership. We'll share our strategic framework for achieving this "AND," demonstrating how it benefits companies, individuals, open source projects, and the world around us.

Join us to learn how to build similar partnerships within your organization and why corporate engagement in open source sustainability is more important now than ever to ensure the long-term health of the critical digital infrastructure underpinning our modern world.

Over the past decade, open source and developer education have evolved dramatically. This talk explores key trends shaping the landscape, from shifts in bootcamp models and messaging to the role of open source in learning pathways. We'll examine what has persisted, what has transformed, and what these changes mean for educators, industry leaders, and learners. Whether you're building developer education programs, contributing to open source learning initiatives, or navigating the intersection of both, this session will provide valuable insights into the forces driving the future of developer education.

Key Themes:
- The evolution of bootcamps and CS degrees and the shifting narratives around developer training
- The enduring role of open source as both a learning tool and a career accelerant
- How industry expectations for self-taught and formally trained developers have changed
- The impact of AI and automation on developer education and skills acquisition