Tidelift ✨

Cover image for In a shocker, paid maintainers do more security and maintenance work than unpaid maintainers
Caitlin Bixby
Caitlin Bixby

Posted on

In a shocker, paid maintainers do more security and maintenance work than unpaid maintainers

In late 2022, Tidelift fielded its second survey of open source maintainers. Hundreds of maintainers responded with thoughts about getting paid for their work, the security and maintenance practices they have in place for their projects, and where they need help most, along with a host of other interesting insights.

In the fifth of eleven insights of this year’s survey, we provided maintainers with a list of some of the most important security and maintenance practices we are partnering with maintainers to validate at Tidelift, and asked them to tell us which of these practices have been implemented for most or all of the projects they maintain.

Top security and maintenance practices implemented by maintainers today

Of this list, far and away the most commonly implemented practice, with 86% of maintainers choosing it, was having a clearly documented open source license. Almost two-thirds of maintainers currently provide documented release notes and upgrade considerations (63%) or a published contributor guide (62%), the two practices that were next most commonly implemented.

To read more insights from our fifth headline, visit our blog, and to read maintainer responses to all eleven insights, you can download the full survey report right now.

Want the TL;DR? We’re hosting a live webinar on Thursday, May 18 at 3 p.m. ET when Tidelift’s resident data nerd Chris Grams shares the most interesting bits. RSVP here.

Top comments (0)