The third decade of open source: New rules for developers

How regulations and sustainability are reshaping the ecosystem.

Open source has evolved from a radical idea to the backbone of the world’s most critical infrastructure, but this success brings unprecedented challenges. In her presentation at All Things Open, Nithya Ruff from the Linux Foundation shares where open source has been, where it stands today, and the urgent issues the community must address to ensure its future.

Nithya traces open source’s journey from Richard Stallman’s GPL license and Linus Torvalds’ kernel code to today’s reality where open source underpins everything from government services to electrical grids to banking systems. The second decade saw explosive growth as companies like Google and Netflix built massive infrastructure on open source, and even traditional enterprises began declaring themselves tech companies first. The United Nations now publishes its own open source principles, signaling just how fundamental this technology has become to global digital infrastructure.

Watch more: All Things Open 2025 keynote presentations

This ubiquity creates the central challenge of the third decade: Managing a fragile ecosystem that demands greater responsibility. Thousands of volunteers without formal security training maintain critical code that powers essential infrastructure, creating a precarious supply chain. Regulations like Europe’s Cyber Resilience Act (CRA) now require manufacturers to track vulnerabilities and take ownership of their software supply chains. Beyond security, the funding picture remains fragile with projects relying on sporadic donations and grants while maintainers burn out. Nithya points to promising models like Germany’s sovereign fund but stresses the need for consistent, long-term funding approaches rather than one-off solutions.

The community also faces a generational challenge. Many open source pioneers are nearing retirement while younger developers often take open source for granted, unaware of its licenses, origins, or cultural foundations. Nithya urges the community to actively mentor the next generation and ensure open source principles guide the AI revolution, demanding transparency, open models, and representation of diverse cultures and languages in this new technological frontier.

Key takeaways

• Security and compliance are now mandatory. Regulations like the CRA require manufacturers to know their software supply chain, track vulnerabilities, and take responsibility for fixes.
• Sustainable funding models are urgently needed. The current patchwork of donations and grants leaves projects vulnerable, requiring consistent, long-term funding approaches.
• Mentorship matters for the future. The community must share open source history, culture, and ethos with younger developers to preserve what Nithya calls “one of the most successful enablers of global innovation in history.”

The third decade presents a pivotal moment for open source. By addressing security, sustainability, and succession while maintaining openness as AI reshapes technology, the community can ensure open source continues driving global innovation for decades to come.

More from We Love Open Source

• Want to get into AI? Start with this.
• Deep dive into the Model Context Protocol
• The secret skill every developer needs to succeed with AI today
• How I use AI agents to automate my workflow and save hours
• Skip the crowded job hunt: Find your tribe instead