How IT Managers Can Handle Changes in Open Source Projects The open-source world is changing fast, and IT managers need to be prepared. Projects that were once stable can face unexpected challenges like license changes, losing key sponsors, or a decline in the number of maintainers. This can create risks for companies that rely on these tools. A good example is FluxCD, a popular GitOps tool. It was developed by Weaveworks, but when the company shut down, many feared the project would disappear. Fortunately, major companies stepped in to support it, ensuring its survival. However, not all projects are that lucky. Many open-source companies are struggling because investors are now more focused on AI. Some projects have changed their licenses, as seen with Redis, HashiCorp, and Buoyant. This can create uncertainty for businesses using these tools. To manage these risks, IT managers should look beyond just licensing and security. They need to check if a project has diverse contributors and if it is backed by a foundation. Projects within organizations like the Cloud Native Computing Foundation (CNCF) are generally more stable because they are not controlled by a single company. When a project starts losing maintainers or stops releasing updates, it can be a warning sign. For example, the container runtime RKT was archived by CNCF when its maintainers stopped responding to security issues. On the other hand, Cortex survived because AWS and Red Hat stepped in to keep it running. One way to reduce risk is by choosing projects with strong governance and multiple contributors. Foundations help by enforcing best practices and preventing sudden license changes. It's also important to check if a project's backers have a solid business model. Companies that rely on a small number of customers may struggle in the long run. IT managers should also think ahead: If a project needs a security fix in three years, who will provide it? Relying on a single enthusiastic developer is risky because people move on to new things. A stable community and long-term contributors make a project more reliable. Risk management in open source is like any other business challenge. Companies fail all the time, and software projects can disappear. By paying attention to a project's health, its governance, and its financial backing, IT managers can make smarter decisions and reduce the risk of disruption. Open source is here to stay, but companies need a strategy to handle its uncertainties.
