---
title: Open Source Hygiene
pretalx_url: https://pretalx.seagl.org/2024/talk/BWFP3C/
beginning: '2024-11-08T10:30:00-08:00'
end: '2024-11-08T11:20:00-08:00'
presenters:
- name: Ria Farrell Schalnat
  pretalx_url: https://pretalx.seagl.org/2024/speaker/C8VCAV/
  biography: Ria Farrell Schalnat works with the Open Program Office of Hewlett Packard
    Enterprise. This role combines her prior lives as a computer programmer, lawyer
    and adjunct professor specializing in intellectual property subjects including
    open source. She has guided initiatives in patent portfolio management, intellectual
    property due diligence for mergers and acquisitions, software licensing, workflow
    and process management. Ria is served for two years as President of CincyIP, a
    local bar association dedicated to intellectual property education. She also served
    as an adjunct professor at the University of Cincinnati School of Law and University
    of Dayton School of Law on subjects including Patent Litigation, Cyberspace Law
    and Open Source Lice
---

Open source compliance used to focus on license obligations. Recent regulatory movements (e.g., EO-14028 and EU-CRA) along with an increasing awareness of the need for stronger security profiles in open source (e.g., XZ vulnerability) have created new obligations for consumers and distributors of open source software. This talk will focus on basic open source compliance and best practices in that space along with the newer SBOM requirements arising out of regulatory efforts in both the United States and Europe. This talk will also touch on the additional considerations such as open source health and how good hygiene is necessary for the sustainability of both individual open source projects as well as for the products which incorporate them.
