Session ID : OPN214 Getting the most out of your open source investments Zaheda Bhorat Max Spevack Principal Open Source Technologist Senior Manager, Linux and Open Source Amazon Web Services Amazon Web Services © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Open Source Consume Contribute Community Communicate Culture We are AWSOpen Hands up! Open Source Trends 40M+ 41B+ Open Source Developers Lines of Code 44M+ 1.3M+ New Repositories on New contributors (2019) GitHub (2019) Courtesy of The Linux Foundation Sources: Sourceclear, Sonatype, Github Amazon mission To be Earth’s most customer-centric company … Consume License detection & compliance Stay close to upstream Don’t ingest unlicensed code Keep your 1P and 3P code separate Best Practices ClearlyDefined SPDX https://github.com/amzn/askalono Tools Contribute 2016 gerrit-check scapy gradle fast align apache phoenix lombok tez capybara plugin - cbmc pygresql cmock devkit dovecot appium libarchive esp-open-rtos picker jcommander hue iot toolbar mysql workbench libsoup zipper eclipse paho mariadb-connector-j - github little proxy little cnn aws californium pyzmq cocoapods rails remotedebugger elastalert redis appium-gulp-plugin street address street chromedriver xcpretty google guava wing - debug - apache hive apache joshua loader - catwatch libfuse fabric daterange webdriveragent utilities sync appium grpc hot - wycheproof appium oci-fetch - django eval yubico ansible kernel - gulp-typescript yarn mr mqtt boto 3 uml ldns bixie - pig go scikit-fuzzy react mshadow spark apache react - appium-android-bootstrap libgxps safe postgresql presto linux wordpress apache commons dbutils glib rosette udp grpc - joshua decoder parquet lantram akka glib-networking dynamic-object agent chromium vim appiumadb docker fop input presto hadoop apache 2 - httpclient ios-webkit-debug-proxy gvsbuild statsd backend assertj-core databind apache commons lang dynamodb-milkhatx webdriver java qemu apache pig apache word segmentation goa ruby-simple-queue logstash immutables.org mvel jackson moses openfire tupl hana nginx iputils treeextra netty tsung chromium s3_file dockerclient wired tiger - facebook redhat filequeue httpcomponents rspec-retry go aws-scala beanstalker sentry apache mxnet xen leveldb client troposphere - apache oozie lang go-winio containerd pkg errors dpdk celery dynamodb backend apache zeppelin exe statsd - elephas - init gpyopt bandit - http2 go apache commons io kinesalite apache bigtop - go elasticsearch yield-java dot - open fire kenlm ews java api cloud rebouncer botoflow parquet-python apache ant haproxy mqtt js glisten bigstore - apache tomcatapache exoplayer protocol angulartooltips appium airflow - ultipart-parser apache hbase sys-proctable rdoc git dtcoretext p5 cmis_5 react-native 2017 tslint-eslint-rules gbm java apache (http server) cerebro glib alks-cli oss-attribution-generator gerrit-check incubator mxnet jruby web socket sharp rollbar linux (kvm) hue rgp netlink cli xml - cni scapy - tabular json11 postcss-extract-animations nvme - jgit fast align tez emscripten r509-ocsp-responder flink gucumber lmdbjava security monkey security linux licensee plugin homebrew pygresql smack - lombok aalto nodejs dovecot gpy slight.alexa wing gpyoptapache phoenix libarchive capybara picker devkit tslint jcommander appium typescript-fsa little proxy little zipper syntax moby cmock gradle cbmc - esp-open-rtos iot elastalert kappa toolbar mariadb-connector-j github - libsoup lfs irate mysql workbench eclipse paho plantuml plus pyzmq cnn cocoapods cmis_5 flask-sqlalchemy aws tensorboard rails git git fortune server 389ds appium-gulp-plugin pkcs7pad californium wycheproof sockeye google guava redis street address street xcpretty debug wing - xenbits goa loader tinyxml12 remotedebugger phoenix openjdk chromedriver open mpi - daterange - catwatch apache hive sync tacacs fabric libfuse sqoop webdriveragent hot chart.js yubico kernel swipeout utilities - s2n libc yarn - apache joshua - astrum go apache spark oci-fetch django eval ex_aws - - moto ansible yarn boogieman react appium apache beam grpc mr wycheproof mysql boto 3 appium - scikit-fuzzy bixie uml react mshadow keras pig gulp-typescript safe native mqtt openssl libgxps ompi ldns bam - dmlc grpc apache commons dbutils - linux appium-android-bootstrap udp joshua decoder lantram - ublockorigin apache hadoop presto typescript-json-schema ) parquet bam react glib geckodriver glib linux (pm) linux xfs counterfeiter dynamic-object libjson akka agent peewee appiumadb input nvme glib-networking rosette lang fop chromium vim assertj-core ( firefox - httpclient gvsbuild test docker - presto hadoop apache 2 ios-webkit-debug-proxy go qemu word segmentation databind statsd backend tercom linux dynamodb-milkhatx wordpress mvel nginx apache antapache pig apache webdriver apache commons lang libmoon openfire immutables.org gsettings eslint dpdk moses iputils ruby-simple-queue tsung hana webhooks logstash wired tiger s3_file tupl netty chromium bencode-go wingtk jackson btrfs multi-module-maven-release-plugin treeextra liblouis curator aws-scala - sentry rspec-retry filequeue binary ts-test dockerclient go - - parsimonious gpyopt server kotlin facebook autovpn httpcomponents - beanstalker yarn cmake libkv linux-pci rust sequel apache mxnet leveldb pyaad go client corenlp - xen (xendrivers) troposphere pidgin react-int ntpsec apache oozie open fire + containerd celery dynamodb backend exe glistencairo - hadoop apache zeppelin python rigor graph init statsd gtk - allure - mqtt js linux object - errors pynamodb airlift apache bigtop emrun - apache tomcatapache redhat deniswernert/udev dot nginx kinesalite dataformats kubernetes elephas bigstore go - bandit lombok - - irate rdoc uiautomator2 apache commons io parquet-python elasticsearch - yield-java conda pkg linux (fbdev) git apache seabios lfs immutableassign rebouncer exoplayer mithriljs paramz kenlm ews java api - botoflow janus cloud papaparse haproxy gatsby apache lucene dynamic git sys-proctable macports containernetworking airflow appium hypothesis s3fs angulartooltips ultipart-parser behave jackson apache hbase appium dtcoretext bro coreos vowpal wabbit koji bin sparklingml conda-build go-winio linux (blkfront) redux repolinter linux (arch) postgresql intellij-community functional-streams-for-scala typed definitely wireshark react-native react-spinkit jscolor spark-redshift multi-module-mave spring framework pydeepgp p5-protocol-http2 deep visualization toolbox mxnet notebooks react-draft-wysiwyg libfabric xen devel cryptography gbm java cynicalapache (http server) cerebro alks-cli oss-attribution-generator tslint-eslint-rules glib incubator mxnet jruby arrow rollbar linux (kvm) rgp netlink gerrit-check web socket sharp cldr hue cli cni xml 2018 - scapy - diaporama authenticator tabular tensorflow packer json11 postcss-extract-animations - nvme - jgit fast align tez emscripten lmdbjava gucumber security monkey security linux licensee plugin homebrew pygresql gpyopt - lombok smack aalto dovecot nodejs syntax - flink gpy amphtml slight.alexa wing unicode apache phoenix libarchive capybara picker devkit tslint jcommander appium typescript-fsa machines little proxy little go-git zipper moby cmock - kotlinpoet esp-open-rtos gradle kuromoji plantuml iot elastalert kappa toolbar cbmc mariadb-connector-j github libsoup eclipse paho pose - lfs - irate mysql workbench plus pyzmq cnn r509-ocsp-responder cocoapods cmis_5 flask-sqlalchemy aws tensorboard rails git git fortune server 389ds appium-gulp-plugin quicktype pkcs7pad californium redis wycheproof sockeye google guava spack street address street xcpretty debug wing irqbalance - pyinvestigate kcov open mpi goa loader miniredis graphql-java pysnmp remotedebugger tinyxml12 openjdk chromedriver tinycorelinux - daterange - catwatch sync tacacs_plus tacacs apache spark focus-android convolutional fabric libfuse apache hive sqoop teleport webdriveragent hot yubico chart.js kernel notebook swipeout utilities - s2n libc yarn - apache joshua scipy - astrum oci-fetch go mosquito django eval llvm jwt ex_aws bundler - - boogieman - moto yarn react appium apache beam grpc mr wycheproof jawk boto 3 appium mysql - scikit-fuzzy bixie ansible uml react pig keras clearlydefined jose gulp-typescript - ompi mshadow bam ubuntu safe libgxps apache jena udp native mqtt openssl ldns tvm grpc - hypothesis oauth2 dmlc - apache commons dbutils appium-android-bootstrap - kpatch graal bam joshua decoder lantram cargo-kcov ublockorigin apache hadoop nimbus presto typescript-json-schema ) parquet react counterfeiter glib peewee linux (pm) linux xfs linux libjson geckodriver akka xcode-install libuavcan dynamic-object input agent gvsbuild - jupyter notebook appiumadb firefox protobuf nvme glib-networking rosette lang fop chromium assertj-core ( chromium vim httpclient glib test liboqs ndbench docker - presto hadoop apache 2 ios-webkit-debug-proxy go qemu word segmentation databind statsd backend tercom linux dynamodb-milkhatx nnvm mvel wordpress apache pig apache nginx apache antapache spacemacs apache commons lang webdriver codegen libmoon - openfire logstash gsettings immutables.org eslint ffmpeg open quantum safe dpdk moses iputils ruby-simple-queue netty tsung hana webhooks btrfs jest wired tiger s3_file wingtk tupl - bencode-go jackson treeextra xenbits fsdevel apache activemq - liblouis curator multi-module-maven-release-plugin aws-scala intellij swagger swagger go - rspec-retry filequeue dockerclient sentry binary txthings - - jetty.project xen