Abstract: Open source promotes the rapid development of the information industry through the collaborative development mode of multiple people and becomes an important means of digital transformation of enterprises. The introduction of open source has become an inevitable trend for enterprises. This paper analyzes the open source risks faced by enterprises, including intellectual property and compliance risks, security and data risks, technology and operation and maintenance risks, management risks, etc. Facing the risks of open source, enterprises need to establish a sound open source governance system and establish a management mechanism around the life cycle of open source software.

Key words: open source risk, open source governance, open source software