mailwal

John, you’re invited to our next Tech Talk -- Stop Forking Around – Upstream Contribution & CRA Reporting

OpenSSF

Maintaining private open source forks creates ongoing technical debt, engineering overhead, and compliance risks, especially under emerging frameworks like the Cyber Resilience Act (CRA). An upstream-first strategy allows organizations to streamline security patching while maximizing their open source investment.

Join us on Monday, November 2nd at 12:00 PM ET for an OpenSSF Tech Talk:

"Stop Forking Around: How Upstream Contribution Minimizes Technical Debt & Streamlines CRA Reporting."

Speakers from Ericsson, ActiveState, and Linux Foundation Research will discuss:

  • Quantifying Open Source ROI: Key takeaways from recent research on how strategic upstream investments yield 2x to 5x returns.
  • CRA Compliance & Security: Applying OpenSSF guidelines to simplify vulnerability management and automated dependency tracking.
  • Real-World Implementation: Practical strategies for scaling upstream-first workflows without disrupting active product commitments.

Meet the Speakers

adrienn-lawson-1
jan_melen
kashif_khan
moris_chen

Adrienn Lawson

(🎙️ Moderator)

Director of Quantitative Research

Linux Foundation Research

Jan Melen

General Manager Ericsson Software Technology Finland

Kashif Khan

Principal Open Source Architect

Ericsson Software Technology Finland

Moris Chen

VP of Customer Success

ActiveState

P.S. Can’t make the live session on November 2nd? Register anyway and we’ll send you the recording and the post-talk materials.

See you there!

Best,

🛡️ The OpenSSF Team

📩 Stay Updated! Follow us on LinkedIn for the latest news!

This email was sent by: OpenSSF

The Linux Foundation, 2810 N Church St., PMB 57274, Wilmington, Delaware 19802-4447, United States

Subscription Center