Microsoft Links CodePlex to Open Source Repositories

  • By Jeffrey Schwartz
  • 05/28/09

Microsoft this week took another step to forge ties with the open source community through a pact with Black Duck Software that will feed code and project information from Microsoft's CodePlex into Black Duck's open source code repositories.

Black Duck's KnowledgeBase and Koders.com code are among a growing base of repositories used by enterprise development managers to search and manage open source code.

Since its founding in 2002, Black Duck said it has already gathered 200,000 open source projects from 4,100 sites. Black Duck said it has added 40,000 new projects since January to KnowledgeBase, the company's searchable database of open source projects and code.

Koders.com is a free searchable engine acquired by Black Duck last year that allows anyone to search for open source code. It hosts more than 2 billion lines of open source code and is growing at a pace of 2,000 projects each month, according to the company. The company said it has 600 customers.

Microsoft's CodePlex hosts primarily Windows and .NET code and data, though it increasingly gathers relevant open source projects, as well. CodePlex currently has 9,000 projects. While Black Duck's KnowledgeBase and Koders.com had previously gathered some CodePlex content, Microsoft is now providing a direct feed.

"It's never been as complete as it could be in terms of both covering all the projects as well as having access to all of the associated meta data and project information around all of those 9,000 projects," said Peter Vescuso, Black Duck's executive vice president of marketing and business development. "The value of our service hinges on the completeness of the code base and the value of the information we can provide."

The deal does not call for Black Duck to provide a return feed to Microsoft's CodePlex.

A growing number of enterprises are using code repositories like KnowledgeBase to better manage their use of open source code and make sure they are in compliance with any licensing issues, according to Jay Lyman, an analyst at The 451 Group. Black Duck is a leading provider, though there are numerous other players who offer code repositories such as Protocode, Ohlol and OpenLogic, among others. SourceForge and CollabNet are also popular resources, Lyman added.

Lyman said he wouldn't be surprised to see Microsoft involved in further pacts. "It's interesting to see Microsoft contributing to the legitimacy of open source software and the intellectual property behind open source software," Lyman said.

Forrester analyst Jeffrey Hammond added in an e-mail interview that it will help development managers get a better handle on their combined open source and .NET projects.

"The moves that Black Duck has made will make it easier to identify and control the adoption of useful OSS software provided by Microsoft and other parties," Hammond noted. "I view it as yet another step in the maturation of OSS in the .NET world."

About the Author

Jeffrey Schwartz is executive editor, features, for Redmond Developer News. You can contact him at [email protected].

Featured

  • laptop and fish hook

    Security Firm Identifies Generative AI 'Vishing' Attack

    A new report from Ontinue's Cyber Defense Center has identified a complex, multi-stage cyber attack that leveraged social engineering, remote access tools, and signed binaries to infiltrate and persist within a target network.

  • From Fire TV to Signage Stick: University of Utah's Digital Signage Evolution

    Jake Sorensen, who oversees sponsorship and advertising and Student Media in Auxiliary Business Development at the University of Utah, has navigated the digital signage landscape for nearly 15 years. He was managing hundreds of devices on campus that were incompatible with digital signage requirements and needed a solution that was reliable and lowered labor costs. The Amazon Signage Stick, specifically engineered for digital signage applications, gave him the stability and design functionality the University of Utah needed, along with the assurance of long-term support.

  • teacher

    6 Policy Recommendations for Incorporating AI in the Classroom

    The Southern Regional Education Board's Commission on AI in Education has published six recommendations for states on adopting artificial intelligence in schools, colleges, and universities. The guidance marks the commission's first release since it was established last February, with more recommendations planned in the coming year.

  • various technology icons including a cloud, AI chip, and padlock shield above a laptop displaying charts and cloud data

    AI-Focused Data Security Report Identifies Cloud Governance Gaps

    A new Varonis data security report notes that excessive permissions and AI-driven risks are leaving cloud environments dangerously exposed.