Open Source Summit + AI_dev Japan 2024

Governments around the world are working on legislation to regulate cybersecurity, AI, and product liability for software. The success of free and open source projects and companies has been driven by our technology. Our teams working on legislation and public policy are much smaller, but we also have results that we can be very proud of. This presentation looks at the importance of policy work and what we do that leads to success in this domain. We will look at the international relevance of some current regulations being produced in Europe - notably the EU's Cyber Resilience Act, the AI Act, and the Product Liability Directive. From these, we will look at how these areas could be best regulated in other parts of the world. We will examine the technical information that policy makers need, so that they can make informed decisions. And we will also look at the meta goal of improving our policy work in the long term. We will do this by looking at the methods and organisation that allowed our ecosystem to be effective while working with the legislators to improve these texts.

For modern businesses navigating today's dynamic tech environment, open source is more than just a platform – it's a game-changer. This session dives deep into the transformative power of open-source software as a key driver of business agility and innovation. Real-world stories from the world of FinTech will showcase how open source empowers Japanese organizations to adapt swiftly to evolving markets and technological advancements. We'll address a common pain point: security concerns during open-source adoption and explore effective strategies to mitigate them. Beyond the technology itself, this session explores the cultural shift required to thrive in an open-source ecosystem. We'll highlight the unique collaborative spirit and community aspects within the Japanese business landscape, empowering you to leverage open source effectively.

The software industry, a bastion of innovation, often overlooks the mental well-being of its builders. This session delves into challenges at all career levels including open source, from layoffs to project pressures, underscoring the need to recognize and respond to mental health fluctuations for inclusive, resilient teams. Compelling narratives include: - Leadership: A startup CEO battling burnout and imposter syndrome. - Career transitions: A young developer overcoming job loss stigma. - Personal resilience: An SRE managing personal loss during critical projects. - Open Source enthusiast: A open-source enthusiast juggling his passion in open source with his official work. Weaving in our journeys with depression during the pandemic, we'll explore strategies for: - Overcoming discrimination in the tech industry. - Taking healthy breaks and prioritizing self-care. - Seeking support from mental health professionals. Our goal is an open, inclusive conversation about mental well-being in open source software. By acknowledging the interconnectedness of personal struggles and team success, we can build resilient, supportive environments for all tech talent to thrive.

In this session, we explore the Singapore Government's approach to modernising its security standards and policy development. By leveraging open formats such as OSCAL, open source tools, and integrating DevOps practices, Singapore is streamlining its cybersecurity governance, making it more lean, efficient and robust. Attendees will learn about the implementation of these technologies, the adoption of DevOps for policy development, and the benefits for government agencies. Join us to discover upcoming plans of compliance automation and security testing to further improve security and resiliency for public services.

This panel aims to provide lessons learned on cultural differences when approaching OSS communities. In the past, Willem and Daniel explored the differences between China and Spain. This time we are bringing Yuki Hattori, based in Japan, GitHub employee, and Ana Jiménez from the TODO group with a wide perspective on OSS projects around the world. We learned in the past about how Chinese society works [ring-based trusted networks] and barriers to effectively bringing people into Western based organizations and the other way around, how to effectively interact with more Chinese-based OSS projects. This time we would like to expand this discussion with Japanese concepts such as 'nemawashi' which is the practice of laying groundwork and building consensus before making proposals, 'uchi-soto' dynamics which is the distinction between 'insiders (uchi) and outsiders (soto) in social groups, and others. This panel will bring this discussion to the audience with practical advice on how to engage and onboard newcomers, while we are all learning together from each other.

In this session, we will explore, analyze, and compare various existing models of incentivizing open source developers and the effectiveness of these models in promoting sustained contributions. We will cover different types of incentive programs such as: 1. Project-Based Internships: Programs like Google Summer of Code (GSoC), Open Source Promotion Plan (OSPP), and Outreachy. 2. Bounty Models: Platforms like IssueHunt and IssueBounty. 3. Direct Funding Models: Initiatives like GitHub Sponsors and Open Collective. Based on this foundation, this session will introduce a series of validated practices from various open source projects, corporate environments, and academic communities. These practices leverage an algorithm that precisely measures developer contributions within the community through collaborative behaviors. The contributions are quantified and scored, and the results are used to reward developers, thereby promoting better open source collaboration and community engagement. We call this measurement methodology Openrank.

“The OSS Bird’s Eye View” provides a comprehensive picture of the open source ecosystem. “The OSS Bird’s Eye View” is a tool for visualizing OSS projects, created by community within Japan. This diagram helps to understand the categories and trends of the OSS ecosystem. In this session, we will explain how to create the OSS Bird’s Eye View and how to use it. Also, by comparing past OSS Bird’s Eye Views, we will introduce what kind of transitions have occurred in OSS over the past 10 years, and show how the OSS Bird’s Eye View has deepened our understanding of the OSS ecosystem. This session is beneficial for all people who are beginners in OSS, community leaders, developers, researchers, educators, and those who want to utilize OSS in business. We look forward to your participation.

When a project is abandoned by its inventors, core contributors, and the most prolific community members, it often spells the end. Yet, Meteor.js managed to rebound from the brink of oblivion. This talk explores the critical factors that led to Meteor's fall from being one of the hottest new projects to its near-demise and the remarkable turnaround. We'll delve into the issues that created the crisis, and more importantly, the strategies and actions that enabled a successful comeback. The discussion will cover the pivotal errors that contributed to the project's initial decline and the challenges faced by the community in reviving Meteor, including the lack of comprehensive internal documentation. We will examine the solutions that facilitated the recovery, while also addressing the ongoing challenges and unresolved issues within the Meteor community. Finally, we will explore practical steps and tools you can employ to safeguard your own open-source projects from similar pitfalls.

Telco operators/SPs are going through a massive transformation. This includes the imperative of DT & softwarization (SDN, NFV & cloud). While de-facto std. developing orgs. dominated the stds. space for telcos for years, lately we've seen the open source (OS) projects taking the lead in many of the nwk virtualization, automation, orchestration & telco cloud-related activities. As more control & programmability are abstracted towards SW layers in the telco stack, the use of cloud-native (CN) tech & tools has become unavoidable. But, unlike the OS communities, vendors, or enterprises, the telco adoption of OS and CN is much slower due to multiple reasons. These include cultural, educational & organizational challenges. I'd like to openly discuss these challenges & propose some solutions so that we all can collaborate to accelerate the OS and CN adoption in the Telco domain. My objective is to make OS and CN general & universal in the Telco domain for all operators/SPs, especially in developing economies.

Are you struggling to scale your open-source product? You're not alone. Traditional business models don't always fit the community-driven world of open source. Join me in this talk as we explore the essential components of a community-driven roadmap for open-source companies. We will discuss the importance of inclusivity, clear communication, and creating a welcoming environment for contributors through engaging initiatives and effective use of platforms. We will evaluate different options for community platforms and explore how community appreciation initiatives like awards and giveaways can be more than just token gestures, serving as powerful tools to incentivise participation and foster a sense of appreciation among community members. Moreover, we'll discuss the art of incorporating valuable feedback from the community into the development process, leading to more robust projects and a shared sense of ownership. Drawing on real-world examples and experiences, this talk will equip you with actionable insights to chart a course for your open-source company's success through a community-driven approach.

If you're seeking visibility and recognition for your merits, there's no better place than open source to invest your time and energy. As the saying goes, 99% of bright minds are outside of your organization. Thus, by engaging with the right open source community, you increase your chances of collaborating with them. In this session, we'll discuss how you can leverage the visibility and relationships you cultivate in open source to secure your next job or achieve your career goals, whether it's transitioning into new technology, advancing in your current field, or refining your leadership skills.

What are the advantages of using OSS? - Is it because it is free to use? - Is it because you can start using the latest features? - Is it because everyone else is using it? I believe all of these reasons are correct, but the value becomes even greater by not only using OSS but also engaging more deeply with the OSS community. How should you handle bug fixes and feature additions when using OSS? - Should you maintain patches internally within the company? - Should you modify the source code to implement unique features internally since it is open source? The best practice in the OSS world is to participate in the OSS community and address these issues within the community. In this session, I will share the value of using the OSS community and talk about easy ways to get started with community activities. I will also share tips for engaging with the community. Additionally, I will introduce the CNCJ(Cloud Native Community Japan), which was established to be more active to the cloud-native community in Japan, and training for participating the Kubernetes community which is subchapter of CNCJ.