Trust is a cornerstone of the web3 movement. Decentralization and consensus across the nodes of a public ledger is often used as the main argument how trust is generated but there is an important additional factor: Open Source While mostly all parts in web3 are already defined as open source components there is a big gap in how open source principles are defined and used. While you can find all the source code of projects at open repositories at GitHub, the definition of open source goes far behind that. Is it enough to trust a product only based on some sources being uploaded to the internet? How do we know that the software we are using is really based on exactly that sources? In addition, we need to ask yourself who can change the sources and who has the ownership of them. Moreover, transparency in the software's build process is critical, especially for enterprises. Organizations like the Eclipse Foundation and Linux Foundation have set benchmarks for real open source projects with shared governance and transparent workflows. In this session I want to show the current state of web3 regarding open source standards and best practices. Based on that I want to discuss how we can create even more trust in public ledgers by using transparent supply chain workflow and technologies like reproducible builds.
1