Triangle Java Users Group

Event date: October 21, 2013 18:00


Managing Risk in Component Based Development
October 21st at 6pm ET

Usage of Java components to build applications has grown exponentially. Most applications are now composed primarily of components - 80 - 90% of an application consists of components.

Many of these components are open source components that are housed in the Central Repository, the defacto standard used by open source project teams to distribute their binaries. Recent research shows some interesting trends:

  • 8 billion components were downloaded from Central in the last 12 months.
  • 53% of survey respondents are standardizing on an open source development infrastructure stack.
  • 76% of large organizations have no control over what components are being used in software development projects

Although components help improve developer productivity so that applications can be delivered faster, if components are not managed effectively, security, licensing, and quality issues can put your organization at risk. Industry analysts and standards efforts recognize managing components as a key requirement for modern development efforts.

Gartner addresses the need to manage components as part of an overall software supply chain approach:

"IT supply chain integrity issues are expanding from hardware into software and information. They are growing more complex as IT systems are assembled from a large number of geographically diverse providers, and, now of mainstream concern to enterprise IT." - Ray Valdes, research vice president at Gartner.

Join us as we introduce key concepts for managing and exploiting these components. We'll discuss the current state of application development market, the promise and challenge of components, and we'll provide you with a set of best practice considerations to kick-start your component management initiative.

About the Speaker:

Brian is VP of Product Management at Sonatype. He has extensive open source experience as a member of the Apache Software Foundation and former Chair of the Apache Maven project. Brian was a direct contributor to the Maven ecosystem, including the maven-dependency-plugin and maven-enforcer-plugin. He has over 15 years of experience driving the vision behind, as well as developing and leading the development of software for organizations ranging from startups to large enterprises. Brian is a frequent speaker at national and regional events including JavaOne, and other development related conferences. He holds a BS in CS from Daniel Webster College.
Sonatype Press Release