Insight: Best Practices for Leveraging Open-Source Software and Mitigating Its Risks

Morgan Lewis
Contact

Morgan Lewis

Across industries, open-source software provides the foundation for a significant number of applications, with open-source components per commercial application growing more than six-fold in the last five years. Given this growing prominence, it is critical for companies to understand the related risk and license compliance issues associated with open-source software management. If well managed, companies can benefit from the many advantages of leveraging open-source software, from its low cost to the speed at which it can be deployed, among other benefits.
Below are some best practices to consider when trying to make the most of open-source software.

  • Establish an open-source policy and internal processes to implement it.
  • Review and approve use requests and track the use of open-source software.
  • Keep accurate records.
  • Involve legal and developer organizations—the buy-in of both organizations is needed to achieve success.
  • Develop a training program for developers on the safe use of open-source software.
  • Create a system for people to submit requests to use open-source software and make sure that the scope of the approval of the request is limited to that purpose.
  • Set up separate review tracks for different types of uses or licenses; for example, strictly internal uses of unmodified open-source software or open-source software used in distributed code.
  • Consider developing a fast-track approval process for the use of a limited set of licenses or uses. Reevaluate these processes if use changes.
  • Be mindful that open-source code use can be audited via code inspection or code review tools.

For more on this topic, including recent trends and developments, check out the Morgan Lewis IP Academy series presentation, Open-Source Software: Risks and Rewards.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Morgan Lewis | Attorney Advertising

Written by:

Morgan Lewis
Contact
more
less

Morgan Lewis on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.