Open-source strategy
Where open source creates value for you: what to adopt, what to contribute to, what to release, and how to measure it.
PROFESSIONAL SERVICES · OPEN-SOURCE STRATEGY
All you need is courage
and knowledge.
We help organisations build an open-source strategy, get their work recognised by the international community, and give their teams the confidence to embrace open source.
WHAT WE DO
Strategy, governance
and compliance.
Open-source programme office
Set up an OSPO: a policy, clear roles, an approval flow and a review cycle that fit the size of your organisation.
Licence compliance
A programme aligned with OpenChain ISO/IEC 5230, so every release knows what it ships and what it owes.
Security assurance
Known-vulnerability management for open-source components, aligned with OpenChain ISO/IEC 18974.
Software bills of materials
SBOMs in SPDX (ISO/IEC 5962) or CycloneDX for every release, generated and checked automatically.
Release and contribution
Publish your own projects responsibly, contribute upstream, and give back to the communities you depend on.
AI AND OPEN SOURCE
AI is a friend of open source.
Code to innovate, not to re-create.
The world has already written a great deal of excellent open-source software. AI helps us stand on it, not copy it.
Build on what exists
Use AI to find, read and understand the open-source projects that already solve your problem, then build on them instead of rewriting them.
Innovate where it matters
Spend the time AI saves on what is new: your domain, your users, your ideas.
Respect the licence
AI-assisted code gets the same licence review, attribution and SBOM as any other code we ship.
Keep data at home
Local, open models run on your own servers, as in Madar Assist and RASEEKH, so nothing leaves without your say.
Give back
When AI helps you fix or improve an open-source project, contribute the change upstream.
GET YOUR WORK RECOGNISED
From internal code
to international standing.
Recognition is earned by the work. We help you prepare it, publish it and present it well.
- 01
Publish with confidence
Licences, notices, SBOMs and a contributor policy in place before your first public release.
- 02
Get listed
Prepare for public conformance listings such as OpenChain self-certification.
- 03
Join the community
Choose the foundations and projects worth joining, and take part where it matters.
- 04
Show your work
Release notes, documentation and talks that let international companies see what your team builds.
ENABLE YOUR TEAM
Confidence comes
from practice.
- Training aligned to the LPI certification track, from Linux Essentials upwards
- Hands-on labs: Git, Linux, licences and contribution workflows
- Engineers trained to review components, licences and SBOMs
- Leaders briefed on risk, value and governance
WE DO IT OURSELVES
Proof you
can check.
On GitHub
Our open-source simulators, public on GitHub under Apache-2.0: github.com/Alin-Li-OU/Simulators.
See the evidencePublished simulators
Four open-source simulators under Apache-2.0, with SBOMs and credits.
See the evidenceCompliance programme
A published licence-compliance programme for those simulators, with a review cycle.
See the evidenceMemberships
Linux Foundation associate member, LPI Training Partner (Silver) and SPDX member.
See the evidenceEngagements are scoped and quoted in writing. Conformance listings, memberships and certifications are granted by the bodies concerned; we prepare you for them but cannot guarantee their decisions.
STAY CURIOUS
Be brave with open source.
Tell us where your organisation is today and where you want it to be.