This document discusses lessons learned from serving 5000 customers. It highlights that developers and maintainers directly provide support in open source communities, which helps users become contributors. It also outlines metrics for various open source programs run by JFrog, noting billions of downloads and petabytes of data transfer. The main concerns discussed are Kubernetes adoption, cloud native development, hybrid/multi-cloud environments, and security.

1. DON’T MAKE THE SAME MISTAKES WE DID:
LEARNINGS FROM 5000 CUSTOMERS
Ido Green
@greenido

2. IDO
GREEN
VP Technology

3. HOW DO YOU
SERVE THE
COMMUNITY
WHILE ALSO
RUNNING A
BUSINESS?

4. Open Source At JFrog

5. OPEN SOURCE
SOLUTIONS
AROUND
BINARIES
Artifact management
with OSS plugins
Artifactory
community edition
for C/C++
Conan
OSS package
management

6. CONAN.IO - LESSONS LEARNED
with the communityDevelopers and
maintainers are directly
doing support and
Engaging with users.
Community members’
support each others
(e.g. CppLang slack "conan"
channel)
Users become contributors
& help debugging.

7. OPEN SOURCE SOLUTIONS
SDKs
Plugins
For IDEs
VS Code (soon)

8. OPEN SOURCE FOUNDATIONS

9. ▪ Bintray - Free Distribution for
OSS Projects
▪ JCenter - OSS JVM language
packages
▪ GoCenter.io - Free, Central Go
Modules Repository
OPEN SOURCE PROGRAMS

10. HomebrewBintray
METRICS (YTD)
9.8 Billion
Downloads
4.6 PB
of Data Transfer
411 Million
Downloads
1.5 PB
of Data Transfer
Downloads
DataTransfer

11. DebianConan (C/C++)Jcenter
METRICS (YTD)
6.4 Billion
Downloads
894.6 TB
of Data Transfer
42.2 Million
Downloads
25.2 TB
of Data Transfer
259 Million
Downloads
59.7 TB
of Data Transfer
Downloads
DataTransfer

12. JFrog & Google Sponsor
Free Artifact Management
For OSS Projects
OPEN SOURCE PROGRAMS
The JFrog Community
if you haven't already, and you maintain
an OSS project, join us, it's free!
jfrog.com/oss

13. OPEN SOURCE PROGRAMS - By Numbers
~80% GROWTH
from Aug 2018 to present.
Over 75 Open Source Projects leveraging this program.

14. “Open Source Software is eating the world”

15. BEING IN THE
FLIGHT DECK
OF DEVOPS

16. SOFTWARE DEVELOPERS
IN THE WORLD
* GitHub self-reports
~40 million

17. 22% YOY DEVOPS
BUDGET GROWTH
Through 2022
DEVOPS IS STILL GROWING
“...projections underestimate DevOps’ extended
impact on IT.”
*DevOps: The New Heart of IT. Oppenheimer. 2018.

18. THE
DEVOPS
ARENA
Red Hat
GKE
Amazon EKS
DigitalOcean
Azure AKS
Pivotal
Container
Service

19. CONTINUOUS
DELIVERY

20. TOP PRIORITIES
Increase velocity of
code to production
Security
Increase cloud adoption
88
71
47
29
29
41
Revenue
Acceleration
Improved Agility
Cost Reduction
Better
Management of
Regulatory &
Compliance Risks
Increased
Customer
Satisfaction
Other

21. WHERE IS THE FOCUS?
▪ Scaling / change management
▪ Legacy processes/apps
▪ Growing number of
microservices
▪ Build high quality
vs
Ship new features
28
27
20
19
6
Agility and Time to
Market
Quality of Services
Cost Efficiency
Security and Risk
Reduction
Other

22. DOWNTIME IS EXPENSIVE
Downtime costs companies
an average of $336,000/h.
In (bigger) companies → $540,000/h.
- Gartner

23. “In a world where everything
is moving so rapidly, simply
being fast isn't enough; you
have to be faster than all
your competitors”
RELEASE
FAST
OR DIE

24. 2019 OPEN SOURCE MARKET
Fueling Innovation Big-names keep
investing in Open
Source
Expect
continued security
improvements & focus

25. MAIN FOUR CONCERNS
Kubernetes
adoption
Cloud Native Hybrid /
Multi-cloud
Security

26. MAIN FOUR CONCERNS
Kubernetes
adoption
Cloud Native Hybrid /
Multi-cloud
Security

27. THE REALITY:
<30%
USING K8S TODAY
THE HYPE:
“Everyone is using
Kubernetes.”
~85%
IN 3 YEARS
KUBERNETES IS STILL GROWING UP

28. MAIN FOUR CONCERNS
Kubernetes
adoption
Cloud Native Hybrid /
Multi-cloud
Security

29. THE REALITY:
50%
OF DEVOPS
IS CLOUD NATIVE
THE HYPE:
“Cloud Native is
something that
everyone defaults
to now.”
95%
BY 2020
REALITY CHECK: CLOUD NATIVE IS HERE
“The future will be containerized and those
containers will run on serverless infrastructure.”
- Brendan Burns

30. MAIN FOUR CONCERNS
Kubernetes
adoption
Cloud Native Hybrid /
Multi-cloud
Security

31. THE REALITY:
50%
HYBRID DEVOPS
TODAY STRATEGICALLY
THE HYPE:
“Hybrid is a
stepping stone to
pure cloud.”
78%
BY NEXT YEAR
HYBRID IS A DESTINATION, NOT A STEP

32. ▪ 20% of enterprises with more than 1,000
employees plan to double their public cloud
spending.
▪ 71% of enterprises will increase their public
cloud spending by more than 20%
Workloads Distribution
in 2019 vs in 2022
26
25
49
25
23
52
% of Workloads
CONSENSUS:
HYBRID IS AN INTERNATIONAL DESTINATION
Public Cloud Private Cloud On Premise

33. MAIN FOUR CONCERNS
Kubernetes
adoption
Cloud Native Hybrid /
Multi-cloud
Security

34. THE REALITY:
60%
NOT INTEGRATED INTO
DEVOPS PIPELINE
THE HYPE:
“Security is
something we
apply after
development.”
29%
FOCUSED ON THIRD-PARTY
VULNERABILITIES
SECURITY IS COMING INTO THE PIPELINE

35. TOP ASPECTS - OSS LIBRARY GOVERNANCE
What do you take into consideration when deciding which OSS libraries to use?
1. Quality
2. Activity on Source
Repository
3. Vulnerabilities
4. License
- JFrog survey

36. SECURITY TOOL CRITERIA
1. Universal - Support
of many technologies
2. Integration with
other DevOps tools
3. Quality of Data
What were the top 3 decision-making factors that you considered when
selecting your software composition security analysis tool?
- JFrog survey

37. TOP SECURITY CONCERNS
▪ 1st and 3rd party
Vulnerabilities
▪ Data Security
- JFrog survey

38. SECURITY VS VELOCITY:
Automate
pipeline
Deployment
automation
Test platform
management
WHERE ARE THE BOTTLENECKS?

39. SECURITY VS VELOCITY – TESTING?
“44% say that they
are only testing
about 0-30% of
their codebase.”

40. MAIN FOUR CONCERNS
Kubernetes
adoption
Cloud Native Hybrid /
Multi-cloud
Security

41. Thank You!
Have A Productive Day!
Ido Green
@greenido

42. DebianConan (C/C++)JcenterHomebrewBintray
METRICS (YTD)
9.8 Billion
Downloads
4.6 PB
of Data Transfer
411 Million
Downloads
1.5 PB
of Data Transfer
6.4 Billion
Downloads
894.6 TB
of Data Transfer
42.2 Million
Downloads
25.2 TB
of Data Transfer
259 Million
Downloads
59.7 TB
of Data Transfer