Reducing Risk in Software Supply Chains: A Project Health Perspective with Kubernetes Example

Learn how to assess and monitor the long-term viability and health of open-source software dependencies in this 35-minute conference talk from the Eclipse Foundation. Explore a novel Risk Assessment Model for evaluating the maturity and sustainability of open source libraries, demonstrated through a practical Kubernetes example. Discover approaches for addressing critical gaps in current practices that often overlook sustainability factors during integration, leading to potential technical debt. Gain valuable insights into managing enterprise-scale deployment risks and improving software supply chain security beyond traditional compliance and vulnerability assessments.