What do you think are the primary challenges for Open Source the coming years?

Security? CRA? Financing? Maintainer burnout? Recruiting young developers? Adapting to a country-former-ally going nuts? AI slop? AI bot overload? Something else?

(I'd like some more food for thoughts for an upcoming talk)

@bagder CRA and keeping it that way.
@bagder As people use LLMs more and more, they will likely prefer libraries and versions that are part of the LLMs' training data, causing a negative feedback loop where newer libraries or major versions have more difficulties than before getting adopted.
@bagder Geographical location
@philenotfound please elaborate. How is geolocation going to be a problem?
@bagder Given the current blocking of .ru contributors to certain large OS projects, recent developments in the US... it is not looking good, not a future I want or am looking forward to
@bagder those are all things we are dealing with but I will add a bit to recruiting young developers- we also need to let them know that there are times where they will need to actually fight for things (for lack of a better phrase) to avoid regressions (weirdly unusable licencing, submarine patents, etc.). Many of us who were in the SCO and EEE 90's/2000's era are aging out and institutional/acquired knowledge isn't always easy to find or understand.
@bagder I actually have a positive view on the CRA, if the FOSS community only sees it as a challenge, they will miss a huge boat.
@bagder Maintainer burnout and financing.

@bagder

Projects dying due to lack of people available to maintain it.

Personal q. Have you thought about your own project(s) longevity? The Github contributors page shows there are 4ish people who have been contributing consistently in the recent past.

Can we collect some samples for future cloning purposes? 😜

@bagder Bad actors generating outrage to divide/destroy foss communities.
@bagder the notion that it is noble to make your work available for free to everyone on the planet, even to people who extort/bomb your country, might be seen as wrong.
@bagder VCs trying to finally extract a profit from their investments

@bagder

Projects die:
I have seen some "frankenapps" with older releases or old versions of multiple software. Meh.

Some apps/tools/utilities work fine without updates, others had vulnerabilities and was risky business.

Better to search for alternatives to unmaintained and use compatible @latest versions.

When someone picks up an unmaintained project - or tool, that culture may not be as welcoming as the previous.

+ demands of support and features - the struggle is real! Burnout happens.

@bagder xkcd 2347, but the maintainer started doing that in their early 30s, so they're 50+ now and getting sick of everything. Due to young coders needing to pay rent, only Jian Tan is willing to take over maintainership.
@bagder I'm worried that the ven diagram of the Gen X age range and open source developers are highly overlapping - but it could be due to my own Gen X age and friend circles bias. I would love to see some real data disproving my worries.
@bagder same as all the previous years — capitalism
@bagder The thread is full of insightful comments, the only thing else I can think of is: the structure to make Open Software work. Obviously maintainers need to get paid and it shouldn't be a worry. But then also tying that in with volunteers. And the social aspect that trips up a lot of projects. Sometimes I think we should get institutions (specifically belonging to the civil society, not government or companies) who help maintainers with this structure and make it easier to do well.
@bagder the consequences of AI training in open source code. Its effects in the software engineering job market, the way younger engineers learn, and overall code quality/new software design ideas

@bagder I don't want to say world war three, so instead I'm going to say that the world may be divided into a few large groups of countries and that any collaboration between those groups will be viewed with intense suspicion. As part of that, the Internet may be split into per-group networks. All of this will kill off the international collaboration that's underpinning large, successful open source projects, and many small ones, too.

I hope I'm just being pessimistic.

@liw
Well I just read Harari's Nexus, and based on that I think you're just realistic.
@bagder the new US government declaring open source un-American and a threat to national security ;)

@bagder: connecting with financing and customers.

At @bebop, an insane about of effort is spent understanding how to unlock financing, feature research and customer outreach.

Our solution targeted at non-technical users. Terms "open source" and "self-hosted" are often unknown to our target audience.

A significant effort is spent educating potential users on the value of self-sovereign solutions in a world of opaque PaaS subscriptions and expensive bespoken software.

@bagder maintainer burnout is imho the biggest one at the moment. it lead to the xz situation amongst many others this year after all.

Finding young developers can be very difficult as well i bet - frontend frameworks and other javascript projects probably have it easier finding young people, but projects written in C probably have a harder time. My apprenticeship didn't teach me anything about computers or any non-OOP language, let alone anything without a garbage collector. Anything I learned about how computers actually work, and C, was either a little bit in my A-levels, or completely self-taught. Knowing how computers work, what memory management is, etc, is exceedingly rare to find in younger developers, which is sad to see. I bet plenty of these would love to learn about these topics in their apprenticeship as a software dev.

AI-slop will probably be an increasing issue in the future i bet; you have to sift through more garbage and try to distinguish from ai-generated crap from real issues/contributions, without accidentally throwing something out because a non-native speaker used an llm to translate his text.

One positive thing's for sure, foss devs ain't gonna run out of things to do!

@bagder Geopolitics, the state of it. It's become antithetical to everything FOSS stands for and threatens to rip us all apart.
@bagder I feel like I’m blessed to have been born into the timeline where we even get open source. I’m worried that the natural economic equilibrium won’t permit it to continue though. The idea that a small army of volunteers would band together and build something so profoundly useful that it becomes an economic force, for nothing more than to have said they’ve done it? Wild.

@bagder

Licensing.

The MIT/BSD based licenses seems to get a lot of traction. And while that extreme freedom those licenses has advantages, it has a darker side-effect which can end up with more fragmentation.

For example, take the uutils project, aiming to replace coreutils. If commercial projects pulls in this as a replacement, they can add changes to uutils and never needing to share back the changes they did.

If those changes results in behavioral changes, going from one distro to another one may have quite some compatibility implications. Writing scripts using coreutils/uutils binaries suddenly need to account for various behaviors.

uutils is just a simple example. But GPL licenses can help reduce the fragmentation aspects. Sure, a GPL project can be forked - but it will be with a new name, so it is much clearer that "this is different".

@bagder Depend what we call OpenSource.

I think there are not really any challenge. People will keep putting code online for other people to use.

So what I would say is that the challenge, now that opensource won as a way to write code, is to realise it. And make it known.

And then have a hard look on how we deal with the consequences.

So I would say, mostly, "getting the story of who we are and what we do out" as the challenge.

@bagder overall, it’s all about maintenance:
- who does it/pick up the mantle when needed? People profit off of it mostly without giving back, no one wants/is incentivized to train on “old stuff” that needs maintaining rather than the new hot thing
- what are the incentives? State or bad or both actors can pollute the well, the thing has to work because it’s used somewhere critical for someone, but are all the users’ incentives roughly aligned or is there a wasteful tug of war?
- dependency hell: with the trust issues, are we sure what we depend on is good and/or not too bloated? Are WE too bloated, trying to do too many things?

My 2c, from someone who’s not a Big Name in OSS 🤷‍♂️

@bagder everything.

FOSS mostly builds on enthusiasm of the involved and everything distracting, tiresome and even controversial is a challenge.

@bagder watering down of the open-source ethos.

I'm worried that people are taking open-source for granted, forgetting what it's all about, bending (and allowing others to bend) the open-source definition, or just slapping on an open-source license while acting against the spirit of open-source in every other aspect.

@bagder simplicity of use, ergonomics, ease of installation > usability for non-computer specialists

@bagder I would think of misguided regulation. States become increasingly aware of the importance and ubiquitousness of OS software. That's not bad. But they often don't understand the model, and somehow try to fit OSS and its authors into the same frameworks as commercial providers.

So we need better models. Some of this is discussed in the https://genevadialogue.ch/geneva-manual/

@bagder supporting contributors through geopolitical shifts, AI issues (license laundering, slop, bots)
@bagder The security and AI slop problems go hand in hand, as more young developers start taking AI-driven shortcuts instead of writing their own code, vulnerabilities will proliferate.
@bagder technical debt and github as a single point of failure for basically everything
@bagder CRA but specifically the new talent and people power needed to support the obligations, the few people who know security requirements will be overloaded

@bagder corporate capture.

we already have it, but we don't doubt it's gonna get worse.

@bagder I fear the triple whammy of AI bot overload making it too difficult to host open source code, AI slop making it harder to do due diligence about whether code is safe to use, and the rise of vibe coding (and people who think AI can replace programmers). Programmers already feel undervalued without also having to struggle against all those facets of the AI push, and burnout is going to be an even worse problem than it already is.

@bagder I can't rank the issues for all of FOSS projects but to add one missing in your suggestions:

The increasing fragmentation of development platforms after a phase of >10 years of concentration on #GitHub.com. I think its decline started with the acquisition by #Microsoft. That wasn't good either but fragmentation makes it harder to get contributions by newcomers who are not yet part of your platform.

@bagder Sanction war. With the example of ugly episode of sanctioning Russian contributors, threat looms over geographical isolation of projects. What if US sanctions Europe? What if Europe sanctions China? What if China sanctions India? Law enforcement factor shifts the attitude of major FOSS project boards from "freedom, freedom, freedom" to "laws, lawyers, I don't want to be jailed" and I am afraid the Russia thing is just the beginning.
@bagder A few things ... decentralised versus centralised control, country/planet scale automation in the hands of very few 'not so nice' people, overlapping/competing/alternate realities happily co-existing due to the normalisation/abstraction mediated by capitalism ... naming things and the tyranny of transitive software dependencies. There is more ...
@bagder an ever shrinking group of people who have enough free time and headspace to get into free software because late-stage capitalism