Understanding Industry Requirements for FLOSS Governance Tools - Open Source Systems: Enterprise Software and Solutions Access content directly
Conference Papers Year : 2018

Understanding Industry Requirements for FLOSS Governance Tools


Almost all software products today incorporate free/libre, and open source software (FLOSS) components. Companies must govern their FLOSS use to avoid potential risks to their intellectual property resulting from the use of FLOSS components. A particular challenge is license compliance. To manage the complexity of license compliance, companies should use tools and well-defined processes to perform these tasks time and cost efficiently. This paper investigates and presents common industry requirements for FLOSS governance tools, followed by an evaluation of the suggested requirements by matching them with the features of existing tools.We chose 10 industry leading companies through polar theoretical sampling and interviewed their FLOSS governance experts to derive a theory of industry needs and requirements for tooling. We then analyzed the features of a governance tools sample and used this analysis to evaluate two categories of our theory: FLOSS license scanning and FLOSS in product bills of materials. The result is a list of FLOSS governance requirements based on our qualitative study of the industry, evaluated using the existing governance tool features. For higher practical relevance, we cast our theory as a requirements specification for FLOSS governance tools.
Fichier principal
Vignette du fichier
468158_1_En_13_Chapter.pdf (338.6 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01875494 , version 1 (17-09-2018)





Nikolay Harutyunyan, Andreas Bauer, Dirk Riehle. Understanding Industry Requirements for FLOSS Governance Tools. 14th IFIP International Conference on Open Source Systems (OSS), Jun 2018, Athens, Greece. pp.151-167, ⟨10.1007/978-3-319-92375-8_13⟩. ⟨hal-01875494⟩
44 View
123 Download



Gmail Facebook X LinkedIn More