Skip Navigation
11 comments
  • I definitely like the sentiment, but how would this work exactly? Like what exactly are we trying to accomplish? I'm having trouble to see what it would mean in reality.

    Let's say for example a small local government want to do a thing with software. Normally they put out a tender for local suppliers to get the thing done. These suppliers use a whole scale of software solutions. For some things they all use the same big brand solution because that's just what everyone uses, for other things everyone does their own thing. Some may include open source solutions, some may not. Some may even have created their own solutions. Especially with government this is very common. Governments usually have to do very specific things in a very specific way. Some provider comes along with their own custom made to do that exact thing. And once a couple of local governments use it and work out the issues, a lot of them will use it. Especially if specific certifications apply.

    So how would this work if this becomes a law?

    If the government puts out a tender, would they be required to use a supplier that uses open source software in their stack? Or does it only given them "bonus points" (not sure how that would work?). And does the provider need to use open source in all of their stack? Or how much is allowed? Say they provide a service that's fully open source, but the people in the office use Windows on their machines, would that disqualify them?

    And one of the nightmares of the previous decade was GDPR. Specifically I mention it because one of the requirements is for any provider to have a personal data processing statement. But not just between the customer and the supplier, but also any suppliers the supplier uses and every supplier they use etc. etc. This is why you get those crazy "Do you want to share with our 3924 partners?" prompts. So if we circle back to our open source proposal, does the provider need to use open source or do all of their suppliers also need to use open source.

    This is not even mentioning different open source licenses, like what is open "enough"? And how does this work when a commercial company gets a government grant to create something? I've seen governments that require the end-product to be open sourced at some point, but not in all cases.

    And do we also care about how it's open sourced? Like does the EU need to setup their own Github alternative and require everything to be on there? Because releasing the sources on something controlled by Microsoft feels wrong.

    I'm all in for this and if anyone want to put some serious time into this, I would definitely be available to help out. I have some practical experience in this space and I can warn you it gets complicated real fast.

11 comments