Open source management system and method

A method of controlling and managing open source software (OSS) resources provided by OSS providers and used by developers in their software projects, the system comprising:

• analyzing the software projects, to yield a proprietary projects model that represents dependencies of source code portions of the software projects upon the OSS resources;
• generating and updating over time, OSS profiles for the OSS resources exhibiting technical and legal attributes thereof;
• generating and updating over time, projects profiles for the software projects, based on the proprietary projects model;
• and
• monitoring actual OSS resources usage and provide the developers with at least one of:
• (i) reports responsive to the changes the OSS;
• and (ii) guidance responsive to queries from the developers, wherein the reports and the guidance are based on the actual OSS usage, projects model, the projects profiles, and the OSS profiles.

A computer program product for controlling and managing open source software (OSS) resources provided by OSS providers and used by developers in their software projects, the computer program product comprising:

• a non-transitory computer readable medium having computer readable program embodied therewith, the computer readable program comprising:
• computer readable program configured to analyze the software projects, to yield a proprietary projects model that represents dependencies of source code portions of the software projects upon the OSS resources;
• computer readable program configured to generate and update over time, OSS profiles for the OSS resources exhibiting technical and legal attributes thereof;
• computer readable program configured to generate and update over time, projects profiles for the software projects, based on the proprietary model;
• and
• computer readable program configured to monitor actual OSS resources usage and provide the developers with at least one of:
• (i) reports responsive to the changes the OSS;
• and (ii) guidance responsive to queries from the developers, wherein the reports and the guidance are based on the actual OSS usage, projects model, the projects profiles, and the OSS profiles.