QualiPSo • 034763 • WD6.3.1 • Versi

QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 1 of 140
QualiPSo
Quality Platform for Open Source Software
IST- FP6-IP-034763
Working Document WD6.3.1 v3
CMM-like model for OSS
Marion Wittmann, Siemens AG (responsible)
Ranga Nambakam, Siemens AG
With contributions from
Gabriele Ruffati, Engineering
Sergio Oltolina, Engineering
Etiel Petrinja, University of Bolzano
Felipe Ortega, University Rey Juan Carlos
Viviane Malheiros, University of Sao Paulo
Davide Tosi, University of Insubria
Due date of deliverable: 31/10/2009
Actual submission date: 31/10/2009
This work is licensed under the Creative Commons Attribution-Share Alike 3.0 License.
To view a copy of this license, visit http://creativecommons.org/licenses/by-sa/3.0/ or send a
letter to Creative Commons, 171 Second Street, Suite 300, San Francisco, California, 94105,
USA.
This work is partially funded by EU under the grant of IST-FP6-034763.
QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 2 of 140
Change History
Version Date Status Author (Partner) Description
1.0 3.11.2008 Final SIE Final Version 1.0
1.1 5.2.2009 draft SIE TOC adjusted to decisions
from meeting in Sao Carlos;
included contribution from
USP (chapter 7)
1.2 05.06.2009 draft SIE Chapter 4 expanded.
Mapping between TWE and
CMMI explained.
Chapter 5 expanded
significantly, with addition
of practices from CMMI.
Tables added.
Contribution from ENG
included; (ch. 6.3)
New GQM structure from
BOZ included (ch 7)
New structure and contents
of chapter 8 (USP).
Added chapter on
maintenance from BOZ
added (ch 10)
Whole document revised
based on discussions at
Poznan (04/2009)
1.3 18.6.09 Draft SIE Relationship between TWEs
and GQM added, according
to GQM tables from chapter
7
New structure of TWEs
Review comments included
Chapter 8 moved to
Appendix 3
1.4 8.7.09 Draft SIE Thresholds for PDOC and
LCS added
1,5 22.07.2009 Draft SIE Incorporated review
comments from JPL and StR
QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 3 of 140
2.0 29.07.2009 Final SIE Final version created
2.1 20.10.2009 Draft SIE New version of maintenance
process included chapter 8
2.2 29.10.2009 Draft SIE Update of Model and TWEs
and usage scenarios, chapter
5; new, chapter 6,7 and
appendix 4 and 5;
3.0 31.10.2009 final SIE Final version created
QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 4 of 140
EXECUTIVE SUMMARY
This work package 6.3 focuses on the development of a CMM-like model for
FLOSS. This model attempts to help in building trust in the development
processes of companies using or producing FLOSS. The aim of the WP is to
enable software companies to use FLOSS software in production and, in
particular, in their main stream products and not only in prototypes. The trust in
the development process can bring consistent cost savings and reducing the
time to market.
The expected result of the WP 6.3 is a CMM-like model for development of
FLOSS that can be implemented in European software companies. The basis
for the definition of this model is the set of trustworthy elements defined in WP
6.2 and the analysis of the FLOSS development processes described in WP
6.1.
In this version of the working document, problems in using and/or producing
FLOSS will be briefly described. This is followed by a mapping of the
trustworthy elements defined in WD 6.2.1([2]) onto the trustworthy elements
given by the CMMI and vice versa. The mapping should identify the gaps
between the two sets of trustworthy elements. An analysis elaborates which
elements should be included in the CMM-like Model. A suitable structure for the
model and its description is presented. Like in CMMi the trustworthy elements
are clustered into three maturity levels. For each maturity level, the trustworthy
elements are described by listing the assigned Goals, Practices and LookFors.
To ease the use of the model, assessment guidelines have been defined.
Although it is described as “CMM-like Model”, it must be noted that what was
earlier called CMM has now evolved into CMMI (Capability Maturity Model
Integration; [4]). Henceforth, the title of the model is referred to as “CMM-like
model”, all other references contain the name CMMI. In essence, in this
document CMM and CMMI are used interchangeably.
QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 5 of 140
Document Information
IST Project
Number
FP6 – 034763 Acronym QualiPSo
Full title Quality Platform for Open Source Software
Project URL http://www.qualipso.org
Document URL
EU Project officer Michel Lacroix
Deliverable Number WD6.3.1 Title CMM-like model for OSS
Work package Number 6.3 Title Definition of a CMM-like model for OSS
systems development
Activity Number 6 Title Trustworthy Process
Date of delivery Contractual 31/10/2009 Actual 31/10/2009
Status Version 3.0, dated 31/10/2009 final ;
Nature Report ‡ Demonstrator ‡ Other ;
Dissemination
Level
Public ; Consortium ‡
Abstract
(for dissemination)
The work package 6.3 focuses on the development of a CMM-like process
model for FLOSS development. This process model aims to help in
building trust in development processes of companies using or producing
FLOSS.
The trustworthy elements defined in work packages 6.1 and 6.2 were
mapped onto CMMI (Capability Maturity Model Integration) to arrive at the
OpenSource Maturity Model (OMM). The end result of mapping
establishes the trustworthy elements to be included in OMM.
Based on these results, the third version of the process model was
defined. The challenge is to build a process model which is CMM-like but
avoids complexity in favour of wide acceptance and ease of use.
Therefore the new model is also split into levels akin to CMMI, but with
contents varying from CMMI.
The model is accomplished by assessment guidelines.
Keywords FLOSS, Free/Libre Open Source Software, Software development
process, Open Maturity Model, OMM assessment framework
Authors (Partner) Ranga Nambakam (Siemens AG), Etiel Petrinja (Free University of
Bolzano), Felipe Ortega (University Rey Juan Carlos), Gabriele Ruffati
(Engineering) Sergio Oltolina (Engineering), Viviane Malheiros, University
of Sao Paulo, Davide Tosi, University of Insubria
Responsible Marion Wittmann Email marion.wittmann@siemens.com
Author Partner Siemens AG Phone +49 89 63654044
QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 6 of 140
TABLE OF CONTENTS
EXECUTIVE SUMMARY........................................................................................... 4
TABLE OF CONTENTS............................................................................................ 6
1 INTRODUCTION........................................................................................... 8
2 PROBLEM DESCRIPTION ........................................................................... 10
2.1 Trusting FLOSS ..................................................................................... 10
2.2 Problems faced by the Industry in integrating FLOSS – responsibilities,
risks and opportunities........................................................................... 11
2.3 Problems of Industry in producing and releasing FLOSS ...................... 11
3 MAPPING OF TRUSTWORTHY ELEMENTS TO CMMI ..................................... 13
3.1 CMMI Overview ..................................................................................... 13
3.2 Relationship between TWEs, CMMI and OMM...................................... 14
3.3 Results of Mapping ................................................................................ 15
4 ANALYSIS OF MAPPING RESULTS .............................................................. 17
4.1 Analysis of the Identified Mapping ......................................................... 17
4.2 Mapping from CMMI to FLOSS.............................................................. 19
5 CMM-LIKE MODEL FOR FLOSS DEVELOPMENT......................................... 30
5.1 OMM – The QualiPSo Open Maturity Model.......................................... 30
5.2 Structure of OMM - Detailed Elements .................................................. 34
5.2.1 Detailed description of TWE and their practices............................... 35
5.3 Applications of OMM.............................................................................. 65
5.3.1 Usage Scenarios.............................................................................. 65
5.3.2 OMM in Processes of FLOSS Integration ........................................ 68
5.3.2.1 Other implications of FLOSS products to integrators: ............. 70
5.3.3 OMM in processes of FLOSS production......................................... 71
6 GQM FOR TRUSTWORTHY ELEMENTS ....................................................... 79
7 ASSESSMENT GUIDELINES........................................................................ 80
7.1 Input....................................................................................................... 81
7.2 Roles and Responsibilities..................................................................... 81
7.3 Specifications / Guidelines for the Assessment ..................................... 82
7.3.1 Questionnaire................................................................................... 82
7.3.2 Rating Algorithm............................................................................... 83
7.4 Assessment Process ............................................................................. 86
QualiPSo • 034763 • WD6.3.1 • Version 3.0, dated 31/10/2009 • Page 7 of 140
7.5 Results of Assessment .......................................................................... 87
8 OPEN PROCESS FOR EVOLUTION, MAINTENANCE AND ADMINISTRATION
OF OMM ................................................................................................. 91
8.1 OMM Evolution Strategy.................................................................