loading
loading
Navigating Open Source Governance in the Age of Artificial Intelligence: The 2026 State of OSPOs and Open Source Management Hilary Carter | 06 October 2026 As open source software continues to serve as the backbone for modern digital infrastructure, the operational mechanisms designed to manage, protect, and guide its adoption must continuously evolve. Over the past few years, Open Source Program Offices (OSPOs) have transitioned from novel operational units to critical corporate functions. Today, as artificial intelligence reshapes software development and organizational strategy, OSPOs are stepping into an even broader, highly strategic role across global enterprises. Coinciding with Open Source Summit Europe, LF Research, in partnership with the TODO Group, is thrilled to share the key findings from our latest report, The 2026 State of OSPOs and Open Source Management, sponsored by CNCF and the FinOps Foundation. We are truly appreciative of their sponsorship, as well as to the organizations who participated as distribution partners for the survey on which this year’s findings are based, especially CURIOSS, GitHub, InnerSource, OpenChain, and OpenSSF. Several leaders from the TODO Group community also participated in interviews, sharing their practitioner perspectives. Additionally, this year’s report features a foreword from Stephen Augustus from Bloomberg, one of the most well-known voices from open source and an active leader from the TODO Group and numerous other open source project communities. Here are a few of the report’s principal findings: Open source management reaches new heights This year’s research reveals that open source program offices are reaching an unprecedented level of organizational stability. A substantial 57% of OSPOs have remained in the same organizational home over the last 2-3 years, signaling that executive leadership increasingly views open source management as a permanent, core business capability. Furthermore, as organizations expand, their open source structures tend to formalize significantly. Over half of large enterprises (53%) maintain a formally structured OSPO, whereas mid-size and small organizations lean more heavily on informal setups or emerging operational frameworks. At the same time, regional adoption patterns are shifting dramatically. The Asia-Pacific region is poised to lead the next wave of expansion, with 20% of organizations planning an OSPO—double the planning rate observed across the Americas and Europe. Steering the artificial intelligence transformation Perhaps the most defining trend highlighted in the study is the rapid integration of AI governance and agentic workflows into daily OSPO operations. Rather than treating open source software and artificial intelligence as separate disciplines, organizations are leveraging established open source governance frameworks to manage the complexities of modern AI systems. Key findings regarding AI governance and implementation include: - Pervasive governance involvement: A striking 79% of OSPOs involved in AI governance actively contribute to policy formulation, evaluation of open models and datasets, risk management, and legal reviews. - Early lifecycle engagement: Among OSPOs participating in AI decision-making, 85% are brought in at or before the technology selection phase, ensuring compliance and security standards are met from inception. - Addressing core vulnerabilities: The top AI-related risks managed by OSPOs focus heavily on licensing and intellectual property risks (65%) and security vulnerabilities (65%), followed closely by data privacy concerns (59%). - Emergence of agentic AI: AI agents are actively entering open source operations, with 69% of organizations currently prototyping or actively running agentic tools for OSPO workflows, including 18% operating agentic AI in production settings. Unlocking strategic value across the enterprise Beyond risk mitigation and compliance, OSPOs are increasingly recognized as catalysts for operational speed and software reliability. Respondents in our research highlight software quality, security, and compliance as the single most impactful outcome delivered by an OSPO (58%), with open source ecosystem participation (49%) and accelerated development speed (47%) trailing right behind. As new programs emerge to capture these benefits, the upcoming wave of adoption appears imminent. Among organizations currently planning an OSPO, 79% expect to officially launch their initiative within two years, and 66% intend to back these offices with dedicated, full-time staff. Do you agree or disagree with any of these findings from your personal experience? Let us know whether the trends that this report reveals are in line with your realities. We’ll be sure to pass any feedback or points of interest along to our report authors Bianca Trinkenreich, Ana Jiménez Santamaría, and Adrienn Lawson. Their efforts have produced an important reference on the role of the OSPO and open source best practices and management today. To explore the complete dataset, practical case studies, and detailed recommendations for building sustainable open source operations, we invite you to access the full library of insights on our research portal: https://www.linuxfoundation.org/research
document fetched 2026-10-24 10:05 · canonical https://linuxfoundation.org/blog/navigating-open-source-governance-in-the-age-of-artificial-intelligence-the-2026-state-of-ospos-and-open-source-management