Title: Managing Risk in Java Component Based Development – Best Practice Considerations to Kick-Start your Component Management Initiative by Brian Fox
When: Jan 28, 6 - 9 PM (Presentation begins at 7 PM)
Food: We'll have pizza and sodas.
Plug: The BigConf Big Data/NoSQL Conference is Mar 28th! See bigconf.io
Description: Usage of Java components to build applications has grown exponentially. Most applications are now composed primarily of components - 80 - 90% of an application consists of components. Many of these components are open source components that are housed in the Central Repository, the defacto standard used by open source project teams to distribute their binaries. Recent research shows some interesting trends:
• 8 billion components were downloaded from Central in the last 12 months.
• 53% of survey respondents are standardizing on an open source development infrastructure stack.
• 76% of large organizations have no control over what components are being used in software development projects
Although components help improve developer productivity so that applications can be delivered faster, if components are not managed effectively, security, licensing, and quality issues can put your organization at risk. Industry analysts and standards efforts recognize managing components as a key requirement for modern development efforts. Gartner addresses the need to manage components as part of an overall software supply chain approach:
"IT supply chain integrity issues are expanding from hardware into software and information. They are growing more complex as IT systems are assembled from a large number of geographically diverse providers, and, now of mainstream concern to enterprise IT." - Ray Valdes, research vice president at Gartner.
Join us as we introduce key concepts for managing and exploiting these components. We'll discuss the current state of application development market, the promise and challenge of components, and we'll provide you with a set of best practice considerations to kick-start your component management initiative.
Speaker: Brian Fox is VP of Product Management at Sonatype, with extensive open source experience as a member of the Apache Software Foundation for the past 7 years and former Chair of the Apache Maven project. Brian has provided significant development contributions to the Maven ecosystem, including the maven-dependency-plugin and maven-enforcer-plugin. He has over 15 years of experience driving the vision behind, as well as developing and leading the development of software for organizations ranging from startups to large enterprises. Brian is a frequent speaker at national and regional events including JavaOne, and other development related conferences. Brian holds a Bachelor of Science degree in Computer Science from Daniel Webster College.
Sponsors: In addition to Sonatype, many thanks to the following annual supporters of the DC/Nova JUG.