Open Source: The Backbone of the Digital Economy

⚡

Key Takeaways

1Open source is often perceived as unreliable due to the lack of proprietary support, yet it is ubiquitous in the digital economy.

2According to a report by Black Duck, 96% of audited codebases incorporate open source components, highlighting its massive adoption.

3Open source is valued at $8.8 trillion by Harvard Business School, demonstrating its systemic economic value.

💡Why it matters — Open source is crucial for global digital infrastructure, and its management is essential to mitigate risks associated with its criticality.

Open Source: An Underestimated but Essential Infrastructure

In strategic discussions within companies, a persistent misconception remains: open source is inherently unreliable. This perception stems from the lack of a single owner, contract, or dedicated support, which may intuitively seem risky. However, this view is outdated. Open source is no longer just an alternative; it has become the invisible foundation of the digital economy, including in the field of artificial intelligence. Yann Lechelle, a recognized entrepreneur in the tech sector, highlights this transformation.

Clarification: Open Source is Not Synonymous with Irresponsibility

The term open source refers to a method of creating and distributing code, but it does not alone define a model of support or guarantee. These services often exist in commercial forms, built on open foundations. When a company purchases proprietary software, it often acquires a set of open source components, integrated and accompanied by a contract. This demonstrates that open source is already deeply embedded in the software solutions we use daily.

The Ubiquity of Open Source in Industry

Companies do not adopt open source out of ideological choice, but out of necessity. Indeed, their applications and tools already incorporate open source components. A 2024 report on open source security and risks, conducted by Black Duck, reveals that 96% of audited codebases contain open source elements. On the web, Linux dominates, with about 60% of sites using this operating system. Even at Microsoft Azure, over 60% of client cores run on Linux, and this proportion exceeds 90% among the three major cloud providers (AWS, Azure, Google Cloud). This demonstrates that open source is not merely a choice, but a necessity for modern digital infrastructure.

A Colossal Economic Value

The economic impact of open source is often underestimated. A study from Harvard Business School estimates its value at $8.8 trillion, which corresponds to the cost of replacing this infrastructure if it were to disappear. Such an evaluation shows that open source is not only reliable but also fundamental to the global economy. This economic value underscores the importance of open source as a pillar of technological innovation and economic growth.

Security Flaws: A Proof of Criticality, Not Failure

Security incidents like Log4Shell are often cited to criticize open source. However, these events highlight the criticality of certain underfunded software components. The problem lies not in the openness of the code, but in the inadequate management of these critical dependencies. Public initiatives, such as Executive Order 14028 and the work of NIST, aim to strengthen the security of the software supply chain. These measures show that open source is taken seriously and that efforts are being made to secure these essential components.

The Antifragility of Open Source

The concept of antifragility, popularized by Nassim Nicholas Taleb, applies perfectly to open source. It does not merely withstand shocks; it improves because of them. This is made possible through auditability, distributed fixing, redundancy, and institutionalization. Projects like Alpha-Omega from OpenSSF and the German initiative Sovereignty Tech Agency illustrate this aspect. These initiatives enhance the resilience of open source by ensuring a rapid and effective response to vulnerabilities.

The ANSSI Approach: Open Source by Default

The ANSSI, the French cybersecurity authority, supports open source to master key technologies and enhance trust. In February 2026, it updated its policy to promote the principles of secure-by-design and open-by-default, while recommending not to disclose sensitive information. This official position shows that open source is not only accepted but encouraged as a cybersecurity practice.

Strategic Management of Dependencies

The crucial question is not whether open source is reliable, but how to manage its critical dependencies. With 96% of codebases incorporating open source, it is essential to govern this infrastructure strategically. Companies must adopt a proactive approach to manage these dependencies and ensure the security and stability of their systems.

Three Actions to Strengthen Open Source

Map Critical Dependencies: Use the Digital Resilience Index to assess their impact.
Implement a SBOM: Ensure a rigorous update policy.
Invest in Open Source: Contribute, sponsor, and support critical projects to maintain this vital infrastructure.

Open source is the dominant software production system, valued in trillions of dollars. Its resilience and ability to improve in the face of challenges make it a more robust solution than many alternatives. The real risk lies in neglecting its management as a critical infrastructure.