Tidelift

This week we released a new Tidelift company video that in 3 minutes articulates the problem Tidelift solves, how we solve it, and what makes us unique. 1️⃣ Problem: Using bad #opensource packages slows teams down and creates risk to organizations' revenue, data, and customers. 2️⃣ How Tidelift helps: Tidelift helps organizations proactively reduce their reliance on bad open source packages. 3️⃣ What makes us unique: We are the only company that partners with the #maintainers of 1000s of the most-relied-upon open source packages and pays them to make their packages healthier and more secure. Watch it for yourself today! 📽 If you want to talk further with us about anything you see in the video, get in touch with us here: https://lnkd.in/gksz64h8

This Wednesday! Tidelift co-founder and General Counsel, Luis Villa, is taking the stage at #TechCrunchDisrupt2024! Join Luis, Aeva Black (Cybersecurity and Infrastructure Security Agency), and Bogomil Balkansky (Sequoia Capital) for a can't miss panel: "Free but not cheap: the open source dilemma" 🗓️ Oct. 30th, 1:05 PM - 1:45 PM PST 📍 Builder's Stage They'll tackle the burning questions 🔥:  - How do we balance innovation and security in #opensource? - What's the real cost of "free" software? - How can startups and enterprises alike navigate the open source landscape? Luis will bring Tidelift's unique perspective on supporting open source maintainers to create more secure, reliable software for all. Don't miss this chance to dive deep into the future of open source! Register now 👉 https://lnkd.in/g_HTPhwA 

TODAY! 🚀 Tidelift VP of Product Lauren Hanford Hanford and Tidelift partnered maintainer and maintainer at urllib3 Seth Michael Larson are teaming up for an insightful presentation at All Things Open Conference in Raleigh! 📅 TODAY: Monday, October 28th ⏰ 1:45 PM - 2:30 PM ET 📍 #AllThingsOpen, Raleigh They’ll be discussing, "The Unseen, Underappreciated Security Work Your Maintainers May (or may not) Already Be Doing." Attend to learn about: - Implementing security practices like OpenSSF Scorecard and SLSA - Real world examples and the things you can’t see, from urllib3's core team - Scaling security within a global community  - How we can grow this maturity in more projects Don't miss this chance to gain valuable insights into the critical, often invisible security work happening in open source projects! https://lnkd.in/g3DVnm3r

Donald Fischer, Co-founder and CEO, of Tidelift, in this chat, talks about the strategies to mitigate risks associated with using open-source, the future of software development, open-source supply chain security management impact, and more… https://lnkd.in/dKwT5mp3 #Technologynews #AI #Technews #cioinfluence #GripSecurity

Hot topic 🔥: the graying of open source In our final post on our highlights from the 2024 Tidelift state of the open source maintainer report, we go over maintainer demographics and discuss one particularly interesting finding: the open source maintainer community is aging. 📊 The numbers:  - The percentage of maintainers aged 46-65 has doubled since 2021 - Only 10% of maintainers are under 26, down from 25% in 2021 - 45% of respondents have been maintainers for over a decade This shift raises important questions about the future of #opensource. Are we facing a shortage of new talent? Or is this simply a natural evolution of the open source movement? Potential factors behind the trend: Challenges in the maintainer role 😖 - Almost half feel underappreciated - Many report increased stress - Lack of financial compensation Retention of experienced maintainers ⏰ - Long-term maintainers sticking with their projects - Potential upcoming transition to a new generation Training and mentorship gaps 🛠️ - Need for formal skills-based training programs - Growing complexity of maintainer responsibilities As the open source landscape evolves, it's crucial we address these demographic shifts. How can we attract and support the next generation of maintainers? What strategies can we implement to ensure the long-term sustainability of open source projects? 🤔 Read the final post in Chris Grams’ series on the key highlights of the 2024 Tidelift state of the open source maintainer report: https://lnkd.in/g4NfyfQy Want to journey back to the start? 🗺️ You can download the entire report, link in the comments!

AI in open source: a generational shift? 🤔 The latest finding from the 2024 Tidelift state of the open source maintainer report reveals a fascinating trend: younger #opensource maintainers are embracing AI-based coding tools at a significantly higher rate. This generational divide highlights the evolving landscape of open source development and the growing influence of AI in our community. 🕵️ We found that: - 71% of maintainers under 26 use AI tools regularly - compared to just 42% of those 46 and older - overall, 48% of all maintainers are currently using AI tools in their work 🤖 How maintainers are leveraging #AI:  Maintainers are primarily using tools like GitHub Copilot and ChatGPT for code completion and suggestions. They're also finding AI helpful for documentation, testing, generating boilerplate code, brainstorming, and debugging. However, many approach these tools with caution, often modifying AI-generated code to ensure accuracy and relevance. 🔮Future potential: Looking ahead, maintainers see exciting possibilities for AI to revolutionize open source. They envision AI improving and automating documentation, streamlining issue triage, enhancing code quality and review processes, and automating dependency management and security checks. As AI continues to evolve, it's clear that these tools will play an increasingly important role in the open source ecosystem. However, the human element remains crucial, with maintainers emphasizing the importance of context and project-specific knowledge. What's your take on AI in open source? Are you using these tools in your projects? How do you see AI shaping the future of open source development? Let us know! 👇 Read the entire finding on the Tidelift blog: https://lnkd.in/g3JYef6p Want to read the full report? 📑 We’ve linked it in the comments section below! ↘️

📢 Exciting news! Lauren Hanford, VP of Product at Tidelift, is set to deliver a thought-provoking talk at SOSS Fusion in Atlanta! (OpenSSF) The topic: "Unpaid maintainers: The Security Threat No One Is Talking About (yet)" 💬 In this critical session, Lauren will explore: - The hidden risks of unsupported #opensource maintainers - Lessons learned from the recent #xz utils scare - Practical strategies for organizations to mitigate security risks - Real-application impacts of investing in open source software 📅 Wednesday, October 23rd ⏰ 2:05 PM - 2:35 PM ET 📍 Salon 1 Don't miss this opportunity to gain insights that could reshape your approach to open source security. 🎟️ Register now: https://hubs.la/Q02Rdb8j0 💡 Pro tip: Use code SPK for a 30% discount! #SOSSFusion #OpenSSF #OSSSecurity

We’re excited to announce that Tidelift’s Kanishka S. will be speaking at DevOpsDays Boston on October 22nd! 🎉 Kanish’s talk, "Unpaid maintainers: The Security Threat No One Is Talking About (yet)," is a timely and in-depth look at the challenges facing #opensource maintainers and the security implications for organizations. 🗓️ Tuesday, October 22nd, 1:30 PM - 2:00 PM ET 🏢 The Cyclorama at the Boston Center for the Arts Don't miss this opportunity to learn about: - New data from the 2024 Tidelift state of open source maintainer report - Challenges and consequences of not incentivizing maintainers - Success stories when maintainers are properly supported Watch the video below to learn more about why he's excited to speak and register now to attend: https://lnkd.in/eawB8ZWy #DevOpsDaysBoston

🚨 In one hour! If you've been following our posts, you might have seen the following statistic: 60% of maintainers have quit or considered quitting their maintenance work. Want to hear what maintainers themselves think about this finding and some of the other highlights from this year's report? Join us for a webinar TODAY at 1 p.m. ET / 10 a.m. PT 👈 where Tidelift CMO and data nerd Chris Grams will dive into the findings alongside Gary Gregory (Apache Commons and Log4j maintainer), Jeffrey Clark (Pillow maintainer), Seth Michael Larson (urllib3 maintainer), Lauren Hanford (Tidelift VP of product), and Luis Villa (Tidelift co-founder and general counsel). Some of what we’ll be covering: - Security and maintenance practices maintainers are implementing 🔒 - How paid maintainers differ from unpaid maintainers 💰 - Maintainers’ thoughts on AI coding tools 🤖 - …and more! Don’t miss out! RSVP here 👉 https://lnkd.in/g6bQR7Sk

🤖 AI-based coding tools are making waves, but what do open source maintainers think? The 2024 Tidelift state of the open source maintainer report reveals some intriguing insights: 📊 The impact of AI on maintainer work: - 45% predict a negative impact - 31% foresee a positive impact - 24% expect neither positive nor negative effects 🧠 Maintainers' top concerns: 1. Code quality: "AI-based tools often produce incorrect code in more complex situations, and it can be hard to identify issues with their code unless you already know how to do it." 2. Increased maintenance burden: "The increase of spam PRs, comments, and false positives from AI tools and users has been enormous and very frustrating." 3. Integration challenges: "I don't find AI-based coding tools useful yet, there's a lot of nonsense in the suggestions and they don't feel well-integrated into coding tools yet." 🤝 Willingness to accept AI-generated contributions: - 64% less willing to review and accept - 9% more willing to review and accept - 27% unsure or need more information 💡 Despite concerns, some maintainers see potential: "I use Copilot and I'm sure it will take adjusting to get used to these new tools but I think the payoff is definitely going to be worth it. They just need to be used within reason." The future of #AI in #opensource is evolving. How can we ensure these tools enhance rather than hinder maintainer work? 🤔 Learn more about maintainer concerns in Chris Grams’ latest post covering the top findings of the 2024 Tidelift state of the open source maintainer report 📚 https://lnkd.in/gj4knvj6 Want to read the 11 other findings? 👀 Download the complete Tidelift 2024 state of the open source maintainer report in the comments below! 👇