{"id":118936,"date":"2023-08-18T13:31:14","date_gmt":"2023-08-18T13:31:14","guid":{"rendered":"https:\/\/livablesoftware.com\/?p=118936"},"modified":"2023-08-18T13:31:14","modified_gmt":"2023-08-18T13:31:14","slug":"transparent-governance-open-source","status":"publish","type":"post","link":"https:\/\/livablesoftware.com\/transparent-governance-open-source\/","title":{"rendered":"For a more transparent governance of open source"},"content":{"rendered":"

The long-term sustainability of FOSS is a complex and multi-dimensional problem (technical, economical, social, political, etc.). We believe more transparency in how projects are governed would be a significant improvement to all such dimensions. And one that it is easy to implement. This is the gist of our opinion paper For a More Transparent Governance of Open Source <\/em>just published at the Communications of the ACM<\/a> (you can also read the free, unedited version, here<\/a>), co-authored by Javier Luis C\u00e1novas<\/a> and myself<\/a>. In this post, we give you the TL;DR version (refer to the full post for a more nuanced version and supporting references).<\/p>\n

Introduction<\/h2>\n

The lack of key governance information deters potential contributors<\/strong>, as they may feel the onboarding process would be too time-consuming or may fear there are hidden power relations in the project that could limit their impact. The same goes for end-users, which may decide among similar projects based on how healthy and transparent the community behind them is.<\/span><\/p>\n

To address this, FOSS projects should be more transparent and explicitly publish how they are governed in an easy-to-find and easy-to-read file<\/span> acting as the single source-of-truth for the project. This file should, at least, cover aspects such as the project\u2019s: <\/span><\/p>\n

    \n
  1. contribution workflow, <\/span><\/li>\n
  2. decision process to accept new contributions or prioritize features, <\/span><\/li>\n
  3. timeline for making these decisions, and<\/span><\/li>\n
  4. steps to climb the ladder in the project internal organization.<\/span><\/li>\n<\/ol>\n

    We are not there yet, as our analysis data shows.<\/span><\/p>\n

    How transparent is FOSS governance? Looking at the data <\/span><\/h2>\n

    To evaluate the transparency of current OSS projects in GitHub, we conducted ourselves three preliminary different analyses. Each one narrows down the number of analyzed projects but widens the depth of the analysis.<\/p>\n

    We first queried the over 200 million repositories in GitHub for any mention of the word \u201cgovernance\u201d in their readme file. Only 21,114 (a tiny 0,01%) were a hit.\u00a0Next, we focused on four specific software development ecosystems to run our analysis on more homogeneous sets of projects, namely: NPM packages, R packages, Laravel packages and WordPress plugins. We gathered all repositories from 2017 to now, and searched for governance information. To broaden the search, we looked for specific governance files but also looked into contributing and code of conduct files that could include governance aspects.\u00a0We collected information from a total of 13,937 repositories. None of them included a governance.md file<\/strong>. And the presence of contributing and code of conduct files was also low.<\/p>\n

    We performed a final, more in-depth, analysis of the top 25 starred GitHub software projects. We looked for key governance information (recall previous section) in contributing guidelines, code of conduct, readme and project metadata (exploring and following any links that may be provided). 60% of the analyzed projects did not include any governance information while 32% partially discussed governance but only covering two or three aspects, not all of them. This is NOT an improvement over previous analysis<\/a>.<\/p>\n

    Towards a more transparent governance<\/span><\/h2>\n

    What could we do to improve the transparency of open source projects? Some ideas:<\/p>\n