Adopting Open Source Software (OSS) components is a decision that offers many potential advantages - such as cost effectiveness and reputation - but even introduces a potentially high number of risks, which span from the inability of the OSS community to continue the development over time, to a poor quality of code. Differently from commercial off-the-shelf components, to assess risk in OSS component adoption, we can rely on the public availability of measurable information about the component code and the developing communities. In the present paper, we present a risk evaluation technique that uses conceptual mod- elling to assess OSS component adoption risks. We root it in the existing literature on OSS risk assessment and validate it by means of our industrial partners.
['Alberto Siena', 'Mirko Morandini', 'Angelo Susi']
Modelling Risks in Open Source Software Component Selection