TODO Group
TODO Group is an open source program management community that provides resources, frameworks, and collaboration mechanisms for organizations that run or participate in open source programs.
- Vendor-neutral community focused on open source program offices and open source management practices
- Practical guides, checklists, and reference models for establishing and operating open source program offices (OSPOs)
- Working groups and member collaboration for governance, compliance, and open source strategy
- Educational content, webinars, and events on open source policies, tooling, and processes
- Benchmarking and shared documentation on open source maturity, metrics, and organizational structures
More About TODO Group
TODO Group is a collaborative industry group that focuses on helping enterprises, public-sector institutions, and other organizations design, build, and run open source program offices (OSPOs) and related open source governance structures. It operates as a community of practice where Open Source Program Office (OSPO) practitioners and open source stakeholders share reference material, common patterns, and templates that can be adopted or adapted inside corporate and institutional environments. Its resources are used by roles such as CTOs, chief legal officers, open source program managers, and engineering leaders who need repeatable approaches for managing open source usage and contribution at scale.
The group maintains a catalog of guides and playbooks that address topics such as OSPO charters, organizational models, policy frameworks, and contribution workflows (governance and program management). These documents often describe how to structure responsibilities across legal, security, engineering, and procurement teams, and how to connect open source policies to existing software development lifecycles and DevOps pipelines. The content typically references standard open source licenses and licensing models, as well as compliance and review processes that enterprises apply when consuming third-party components or contributing code upstream.
TODO Group also supports working groups and member collaboration spaces where organizations discuss governance models, compliance practices, and metrics frameworks. Typical themes include aligning OSPO activities with corporate risk management, implementing intake and approval workflows for open source dependencies, and defining contribution policies that integrate with common development tools and code hosting platforms. This collaboration provides patterns for integrating open source review processes into Continuous Integration and Continuous Deployment (CI/CD) pipelines, artifact repositories, and internal catalog systems.
From a technology-domain perspective, TODO Group occupies a category that can be described as open source program management (governance, compliance, strategy). Its materials do not function as developer tools or infrastructure products; instead, they describe organizational and procedural architectures for open source operations. This includes guidance on establishing decision-making bodies, defining escalation paths, and mapping open source activities to existing enterprise architecture and portfolio management functions.
In a directory or marketplace context, TODO Group aligns with solution areas such as open source governance, OSPO enablement, and software supply chain policy frameworks. Enterprises use its content as reference input when designing OSPO mandates, determining staffing models, and selecting tooling categories for license compliance, security scanning, and contribution tracking. The group’s neutral, community-based materials give organizations a shared vocabulary and structure for discussing open source strategies internally and with external stakeholders, including foundations and open source communities.