Cite Your Sources
You cannot protect an ecosystem you do not see. For a novice, open-source stewardship begins with strict dependency cataloging and license auditing. Use automated tools to generate a Software Bill of Materials (SBOM). Ensure every third-party package is accounted for, free of security vulnerabilities, and licensed compatibly with your project.
Respecting creators begins with acknowledging their intellectual contribution and abiding by the explicit rules they have set for their work.
Discussion: Treating open-source as a “free buffet” without tracking dependencies creates legal and technical liabilities. Explicit cataloging is the foundational step toward becoming a responsible actor in the global software commons.
You might ask yourself:
- To what degree do we attribute ideas, code, and content with care and clarity?
- To what degree do we make it easy for others to follow the lineage of our work?
Want to assess your full organization? Take the full assessment
Comments