Open Source Summit North America 2025

Open source software powers the critical infrastructure we depend on daily, yet evaluating the health of open source projects remains challenging.

In this talk, we introduce LFX Insights, a Linux Foundation initiative to surface meaningful, standardized metrics on the world’s most critical open source projects. We’ll walk through how we define project criticality, the multidimensional framework we use to evaluate project health, and the data infrastructure powering it all. By making open source more transparent, LFX Insights aims to support decision-making, highlight where help is needed, and contribute to a more sustainable ecosystem.

If the world of open source is moving fast; the world of open source AI is moving even faster. The swift expansion of open source AI projects creates a challenge. Although these readily available technologies are attractive, they can also bring security risks and ethical output dilemmas Guardrails technology is crucial for effectively controlling model behavior in this dynamic environment. Join SUSE and Infosys to explore how to implement guardrails while staying true to open source values.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

Managing risk is always top-of-mind in the financial industry and mitigation is essential to reduce it. One significant risk is the software supply chain that represents the complex network of processes, tools and stakeholders involved in the development, distribution and deployment of software throughout the entire software development lifecycle (SDLC). Operational Data Stores (ODS) can be used to help mitigate the risk associated with software running in any enterprise. They accomplish this by aggregating and correlating operational data from across the disparate systems and tools that comprise the SDLC pipeline into a single, standards-based software bill of materials (SBOMs) data model. By providing real-time data access for investigational queries and composite views of all applications for stakeholders and regulatory agencies, risk associated with the full lifecycle of software management and consumption can be mitigated. Join this session to see how Discover is embracing Operational Data Stores and how it can apply to the broader enterprise community.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

Maintaining high software quality in large, distributed open source projects presents unique challenges. At Automattic, with projects like WordPress.org, WordPress.com, Jetpack, and WooCommerce, we navigate shared responsibility, diverse contributor quality, and the critical need for stability and backward compatibility across vast ecosystems (WordPress.org: 55,000+ plugins, 13,000+ themes).

This BoF will explore practical, modern approaches to elevate quality for projects of any size. We’ll discuss:

• Foster a culture where quality is a core value for all contributors, not a second-hand chore
• Scale quality efforts even with limited resources & volunteer fatigue
• Leverage AI-assisted workflows for code reviews, automated tests, bug triage, & repo maintenance
• Boost engagement with community-focused initiatives like “Testathons” or “Bug Scrubs”

Join us to share experiences and brainstorm solutions to build robust quality practices in open source. Collectively, let’s stay ahead of the game to ensure the long-term health of our projects.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

Since 2020, the CNCF has run 3 mentorship terms per year; in that time, 19 mentees have become CNCF project maintainers. In the last two years, we've found that 40-45 percent of mentees continue to contribute to their projects in the year following their participation in the program.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

The rise and increased prevalence of software supply chain attacks, the strengthened security requirements of compliance frameworks, and the speed and complexity of automated software development and build processes have all driven the need for open source standardization, often called Golden Image or Base Image programs.

But while DevOps and security teams recognize how critical open source standardization is, few feel comfortable tackling a large and fragmented challenge like open source software delivery, especially across diverse and disparate developer needs.

Join Chainguard’s Natalie Somersall to learn about best practices and common pitfalls that you
should be on the lookout for when taking on a golden image program.

Audience members will walk away with a clear understanding of the right change management milestones to keep in mind, the critical implementation criteria, and the most compelling use cases to make developers more productive and deliver secure open source software from the
start.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

Open-source project contributors bring diverse motivations to their work—from the joy of building something meaningful to the pride of seeing their code actively used. Users of open-source software look to benefit from projects that provide compelling solutions, drive standardization, and have supportive communities.
This raises a critical question: How can open-source projects remain sustainable over time while meeting the diverse support needs of users?
In this panel discussion, open-source advocates and representatives from commercial organizations, both contributors and users of open-source software, will explore the complex dynamics of long-term sustainability in the open-source ecosystem. The conversation will address:

• Sustainable support models in open-source communities
• Aligning commercial and community interests
• Success stories and lessons learned the hard way
• Funding strategies: who pays, and how?

Join us to gain valuable insights from multiple perspectives and take part in a live Q&A session to have your questions answered by the experts.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

 In 2014 the Angular team at Google decided to deprecate AngularJS while the replacement wouldn't ready for another 2 years. 10 years later with a lot more hindsight, Stephen will share the lessons learned so that you can more successfully drive adoption, evolve your ecosystem, stay fresh and relevant, and even support the developers you leave behind.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

If mobile observability leaves you hungry for answers, learn how DoorDash cooked up a scalable, open-source recipe — delivering OpenTelemetry metrics backed by community collaboration to bring it to everyone’s table.
While backend services benefit from mature observability tooling, mobile has long been underserved. DoorDash engineers faced this firsthand: messy metric semantics, inconsistent formats, and unclear signals that blurred real issues with telemetry artifacts.
Before, mobile health metrics were generated with an expensive, ETL-like system that was never meant for real-time monitoring and alerting. The team migrated to a unified, cloud-native observability platform powered by OpenTelemetry and Chronosphere, bringing mobile telemetry up to par with backend systems. After migrating, DoorDash achieved significant improvements, including reduced data volume, decreased costs, and improved alert reliability.

This talk shares lessons from that journey and provides practical guidance for anyone integrating OpenTelemetry metrics with Prometheus, especially when delta metrics are involved.

In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

Open source is the foundation of modern software, yet many projects struggle with sustainability—not just in attracting contributors, but in ensuring they stay, grow, and thrive. The landscape of open source contribution has evolved dramatically, demanding a fresh approach to community building and contributor engagement.

Traditional pathways into open source don’t work for everyone. This panel brings together experts who have successfully expanded contributor pipelines beyond the usual audience—through initiatives like the CNCF Deaf and Hard-of-Hearing WG, CHAOSS Africa, and mentorship programs. We’ll explore best practices for guiding contributors from their first PR (or non-code contribution) to meaningful, long-term engagement.

Beyond code, open source thrives on diverse contributions: marketing, content creation, event planning, automation, governance, and more. By broadening the definition of “contributor,” we lower barriers to entry, strengthen projects, and build a more inclusive, resilient ecosystem.

Join us for a discussion on how we can transform contributor journeys to be more inclusive, fulfilling, and impactful for individuals and the broader open source ecosystem.

This session introduces **Interns for Open Source (IFOS)**, a program that offers undergraduate and graduate Computer and Information Sciences students hands-on experience with open source projects for academic credit. Over 10 weeks, students bridge classroom learning and real-world application by contributing through issue tracking and pull requests. Their fresh perspectives provide open source communities with valuable feedback, usability insights, and rigorous testing. Students sharpen technical skills, learn professional workflows, and build portfolios. Open source projects benefit from innovative ideas and unbiased input. Attendees will learn about the program structure, its benefits for students and open source communities, and how to get involved.

Open source is woven into nearly all modern technology, making it more important than ever to support new contributors – but entering the world of open source contribution can be a daunting experience. There are unspoken norms to understand, new tools and best practices to learn, and a whole lot of code to navigate.

In 2023, the UC Santa Cruz OSPO launched a summer mentorship program to support students from Historically Black Colleges and Universities (HBCUs) contributing to open source. Over the course of eight weeks, each tight-knit cohort learns how to productively contribute to a project of their choosing, while working together both in-person and remotely. Program alumni have returned as peer mentors, spoken at conferences, been interviewed for podcasts, and accepted paid work in open source.

This session will showcase the perspective of both current participants and program alumni, offering insight into how we can all work together to make open source more welcoming and inclusive. Whether you're looking to engage diverse new contributors, or you're just curious about the novice experience, you'll be sure to learn something new!

Most of the advice around new contributor experience is oriented towards developers at the beginning of their career - students or those breaking into the tech industry. This time, though, we want to talk about the basics of contribution for senior developers who already have plenty of industry experience. These potential contributors have more than enough technical expertise, but still struggle to participate in open source. For them the barriers tend to be more social and “communicational” than technical, as their previous incentives, goals, and development cultures are fairly different from those present in most open source communities.

As open source contributors working in a big company, we watch our colleagues face these issues. We want to share our experience and what we learned while trying to help these colleagues participate in open source development for the first time.

Note: PDF copy of notes does not contain speaker notes; follow the link in the slides for speaker notes and additional links!

Dojos help provide a safe space which encourages active listening to the experiences of marginalized groups, educate about their perspectives, build empathy towards those different from you. This interactive session provides an arena for participants to practice allyship skills and consider more diverse perspectives. Through facilitated discussions and a scenario-based exercise (replacing the "Dojo" context), participants to learn how to actively listen to the experiences of marginalized groups, understand diverse perspectives, and build empathy. This session aims to equip you with practical strategies for navigating complicated situations and fostering a more inclusive open-source community