1、THE 2025 STATE OF OSPOs AND OPEN SOURCE MANAGEMENT Aligning with New Organizational Priorities August 2025 Bianca Trinkenreich,Ph.D.,Colorado State University Adrienn Lawson,The Linux FoundationForeword by Yuichi Nakamura,Hitachi Ltd.Copyright 2025 The Linux Foundation|August 2025.This report is lic

2、ensed under the Creative Commons Attribution-NoDerivatives 4.0 International Public License.Please cite this research report when using the infographics.See citation guidance on the reports back page.92%of OSPOs are actively involved in OPEN SOURCE SECURITY,with 42%acting as decision-makers&50%PROVI

3、DING ADVISORY SUPPORT.Organizations with an OSPO are 2.5X MORE LIKELY TO ALLOW UPSTREAM CONTRIBUTIONS(70%vs.30%).STRATEGY GAPS(40%),LACK OF EXECUTIVE BUY-IN(35%),and DIFFICULTY JUSTIFYING ROI(35%)are the main challenges to OSPO set-up.88%of organizations perceive improved SOFTWARE QUALITY AND SECURI

4、TY as an impactful outcome of having an OSPO.85%of organizations gained INCREASED INFLUENCE within open source ecosystems due to having an OSPO.Asia-Pacifc66%of OSPOs report READINESS FOR EMERGING TECHNOLOGIES such as generative AI and cloud native infrastructure as an impactful outcome.92%of academ

5、icOSPOs report IMPROVED OPEN SOURCE SKILLS as their top impact.79%of OSPOs are rated EFFECTIVE IN MANAGING GENERATIVE AI RISKS,compared to 65%in 2024.This year saw a 3X INCREASE in organizations planning OSPOs within two years(from 15%in 2024 to 45%),all citing improved developer experience.89%of or

6、ganizations report improved DEVELOPER EXPERIENCE through their OSPO initiatives.Organizations with an OSPO are nearly 2X AS LIKELY TO ENCOURAGE OPEN SOURCE CONTRIBUTIONS(59%vs.30%).49%of OSPOs use INTERNAL COMPLIANCE PROCEDURES to sustain themselves,followed by LEGAL RISK MANAGEMENT(36%)and ACTIVITY