5 exercises — Practice key open source governance terms: BDFL, steering committees, contributor ladders, CLA vs DCO, RFC process, LTS policy, and foundation models.
Core Open Source Governance vocabulary clusters
Leadership models: BDFL (Benevolent Dictator For Life), steering committee, working group, technical oversight committee (TOC), maintainer, committer
Contribution: contributor ladder, CLA (Contributor License Agreement), DCO (Developer Certificate of Origin), project charter, CoC (Code of Conduct) enforcement
Foundations: Apache Software Foundation, CNCF (Cloud Native Computing Foundation), Linux Foundation — each with distinct governance models
0 / 30 completed
1 / 30
A new contributor reads the governance document and asks a senior engineer: "The Python project used to list Guido van Rossum as BDFL. Now it has a Steering Council of five elected members. What changed, and why?"
What does BDFL mean, and what model replaced it in Python?
BDFL (Benevolent Dictator For Life): a governance model where a single founder holds final decision-making authority over a project. The term was coined for Python's Guido van Rossum. In 2018 he stepped down, and Python adopted a Steering Council of five elected members.
Key governance models: BDFL — fast, consistent decisions; single point of failure / burnout risk. Steering committee / council — elected group with defined term limits; broader representation. TOC (Technical Oversight Committee) — used by CNCF to oversee project maturity and policy. Working group — a sub-group formed to address a specific domain (e.g., security, documentation).
In conversation: "We're moving from a BDFL model to a steering committee — it distributes load and makes succession planning easier."
2 / 30
At a community meeting a maintainer explains: "We're replacing our CLA with a DCO. With the CLA, contributors had to sign a legal agreement — some employers blocked it. With the DCO, you just add a Signed-off-by line to your commit message — it certifies you have the right to submit the code."
What is the key difference between a CLA and a DCO?
CLA (Contributor License Agreement): a legal contract signed by contributors granting the project specific rights to use their contributions — often including the ability to relicense. Can be individual or corporate. Tools: CLA Assistant, Google CLA bot.
DCO (Developer Certificate of Origin): a lightweight alternative introduced by the Linux kernel. Each commit includes Signed-off-by: Name <email> certifying the contributor agrees to the project's DCO text — essentially "I wrote this and I have the right to submit it." No separate legal signature needed.
Trade-offs: CLA gives stronger IP protection and relicensing flexibility, but adds friction. DCO reduces friction and is employer-friendly, but offers less legal control. Many large projects (Kubernetes, GitLab) moved from CLA to DCO. Apache still requires a CLA (iCLA / cCLA).
In conversation: "Our DCO bot checks every PR — if there's no Signed-off-by, the CI check fails."
3 / 30
A project's GOVERNANCE.md reads: "Roles: Contributor (merged at least one PR) → Reviewer (can approve PRs in their area) → Committer (write access to the repository; can merge PRs) → Maintainer (sets project direction; votes on releases and governance). Each promotion requires a nomination and a lazy-consensus vote by the current maintainers."
What concept does this document describe?
Contributor ladder: a formalised document describing the roles available in an open source project, the criteria for each, and the process for advancement. It makes the path to maintainership transparent and merit-based.
Common roles: Contributor — anyone who has submitted an accepted contribution (code, docs, design). Reviewer — trusted to give meaningful code review in a specific area; can approve but usually cannot merge. Committer — has write (merge) access to the repository; recognised sustained contributor. Maintainer — sets technical direction, participates in governance votes, is responsible for releases and security response.
Lazy consensus: a vote where silence implies agreement — a proposal passes after a defined waiting period unless someone explicitly objects. Used widely in Apache and CNCF projects.
In conversation: "The contributor ladder is published in GOVERNANCE.md — it removes the 'how do I become a maintainer?' mystery."
4 / 30
During planning, a lead engineer says: "Before we change the plugin API, we need to open an RFC. Write up the motivation, the proposed design, alternatives considered, and the drawbacks. The community has three weeks to comment. If the steering committee approves, it becomes the official design spec and we can start implementation."
What is the purpose of an RFC process in an open source project?
RFC (Request for Comments): a structured proposal document used to design and socialise significant changes before writing code. Borrowed from the IETF internet standards process.
Typical RFC sections: Motivation — why is this change needed? Proposed design — the technical approach. Alternatives considered — what else was evaluated and why it was rejected. Drawbacks — honest trade-offs. Unresolved questions — open issues left for implementation.
Projects using RFCs: Rust (RFCs in a separate GitHub repo), Ember.js, React, Kubernetes (KEPs — Kubernetes Enhancement Proposals), Python (PEPs — Python Enhancement Proposals).
Working group: a sub-group formed to own a specific domain (e.g., the CNCF Security TAG, the Kubernetes SIG-Network). Working groups often drive their own RFC/proposal process.
In conversation: "We don't merge breaking changes without an approved RFC — it keeps the changelog traceable and the community informed."
5 / 30
A release manager announces: "Version 4.0 is our next LTS release — it will receive security patches and critical bug fixes for 36 months. Non-LTS releases are supported for 6 months only. We're also publishing our deprecation policy: any API marked deprecated in 4.x will not be removed until 5.0, giving users at least one full LTS cycle to migrate."
What is an LTS release, and how does it relate to a deprecation policy?
LTS (Long-Term Support): a designated release that receives maintenance updates (security patches, critical bug fixes) for a longer period than the standard release cadence. Gives enterprises and cautious users a stable, low-churn target.
Examples: Node.js LTS (even-numbered majors, 30-month support); Ubuntu LTS (every 2 years, 5-year support); Kubernetes (each minor release supported for ~14 months; no formal LTS, but extended support via commercial vendors).
Release cadence: the schedule at which new versions are published — e.g., "a new minor release every 6 months, a new LTS every 2 years."
Deprecation policy: a formal commitment about how long deprecated APIs, features, or behaviours will be retained before removal. Reduces surprise breakage for downstream users. A good policy ties removal to a future major version and aligns the timeline with at least one LTS cycle.
Trademark: foundations (Apache, CNCF, Linux Foundation) hold project trademarks to prevent unauthorised use of project names — e.g., you cannot ship a modified Kubernetes fork called "Kubernetes" without permission.
In conversation: "We pin to the LTS branch in production — we only upgrade to the next LTS after the deprecation window has passed and we've validated our integrations."
6 / 30
Reviewer Alex comments on a pull request:
// Adds new feature X
'Hey @john, can you add a Signed-off-by line to this commit? It's standard practice for open source projects and ensures you have the rights to contribute.'
What does Alex mean by 'Signed-off-by'?
Alex is referring to a common practice in open-source projects – using a 'Signed-off-by' line. This isn't a legal document but rather a simple tag in the commit message that certifies the author has the right to contribute the code. It replaces the need for more formal agreements like CLAs, streamlining the process and reducing friction.
7 / 30
A new contributor, Maria, sends a message in the project's Slack channel:
'I'm trying to submit this PR but I keep getting rejected. Can someone explain why?'
Which of the following is Maria *most likely* referring to when discussing open-source governance?
Maria's message indicates she is encountering problems with getting her pull request accepted. This likely stems from a misunderstanding or lack of awareness regarding the open-source governance processes – specifically, requirements like Signed-off-by and adherence to code review guidelines. The other options are irrelevant to the core issue.
8 / 30
A pull request description reads:
'This PR implements feature X. Please review and approve. Signed-off-by: [Your Name]'.
What is the primary purpose of including 'Signed-off-by' in this pull request?
The 'Signed-off-by' line is a critical component of open-source governance. It acts as a certification that the contributor has the necessary rights to submit the code – essentially replacing more complex agreements like CLAs by providing a simple, verifiable confirmation. This streamlines acceptance and avoids potential disputes.
9 / 30
During a daily stand-up meeting, Sarah says:
'I'm working on updating the project's governance document. We're moving to a DCO model for contributor agreements, which is simpler and faster than the old CLA.'
What does 'DCO' stand for in this context?
The DCO (Distributed Code Ownership) model is a streamlined approach to contributor agreements used in open-source projects. It's based on adding a 'Signed-off-by' line to the commit message instead of requiring a traditional legal agreement like a CLA. This simplifies the process and reduces administrative overhead.
10 / 30
A project maintainer explains the concept of an RFC (Request For Comments):
'We're using an RFC to discuss a potential change to our plugin API. It's a way for the community to review and provide feedback before we commit to any major changes.'
What is the *primary* goal of creating an RFC?
An RFC (Request For Comments) is a critical process in open-source projects for ensuring that changes are well-considered and aligned with community needs. It's designed to foster discussion, gather feedback, and ultimately result in a more robust and widely accepted technical design.
11 / 30
Reviewer Alex comments on a pull request:
// Adds new feature X
'Hey @john, can you add a Signed-off-by line to this commit? It's standard practice for open source projects and ensures you have the rights to contribute.'
What does Alex mean by 'Signed-off-by'?
Alex is referring to a common practice in open-source projects – using a 'Signed-off-by' line. This isn't a legal document but rather a simple tag in the commit message that certifies the author has the right to contribute the code. It replaces the need for more formal agreements like CLAs, streamlining the process and reducing friction.
12 / 30
A new contributor, Maria, sends a message in the project's Slack channel:
'I'm trying to submit this PR but I keep getting rejected. Can someone explain why?'
Which of the following is Maria *most likely* referring to when discussing open-source governance?
Maria's message indicates she is encountering problems with getting her pull request accepted. This likely stems from a misunderstanding or lack of awareness regarding the open-source governance processes – specifically, requirements like Signed-off-by and adherence to code review guidelines. The other options are irrelevant to the core issue.
13 / 30
A pull request description reads:
'This PR implements feature X. Please review and approve. Signed-off-by: [Your Name]'.
What is the primary purpose of including 'Signed-off-by' in this pull request?
The 'Signed-off-by' line is a critical component of open-source governance. It acts as a certification that the contributor has the necessary rights to submit the code – essentially replacing more complex agreements like CLAs by providing a simple, verifiable confirmation. This streamlines acceptance and avoids potential disputes.
14 / 30
During a daily stand-up meeting, Sarah says:
'I'm working on updating the project's governance document. We're moving to a DCO model for contributor agreements, which is simpler and faster than the old CLA.'
What does 'DCO' stand for in this context?
The DCO (Distributed Code Ownership) model is a streamlined approach to contributor agreements used in open-source projects. It's based on adding a 'Signed-off-by' line to the commit message instead of requiring a traditional legal agreement like a CLA. This simplifies the process and reduces administrative overhead.
15 / 30
A project maintainer explains the concept of an RFC (Request For Comments):
'We're using an RFC to discuss a potential change to our plugin API. It's a way for the community to review and provide feedback before we commit to any major changes.'
What is the *primary* goal of creating an RFC?
An RFC (Request For Comments) is a critical process in open-source projects for ensuring that changes are well-considered and aligned with community needs. It's designed to foster discussion, gather feedback, and ultimately result in a more robust and widely accepted technical design.
16 / 30
Reviewer Alex comments on a pull request:
// Adds new feature X
'Hey @john, can you add a Signed-off-by line to this commit? It's standard practice for open source projects and ensures you have the rights to contribute.'
What does Alex mean by 'Signed-off-by'?
Alex is referring to a common practice in open-source projects – using a 'Signed-off-by' line. This isn't a legal document but rather a simple tag in the commit message that certifies the author has the right to contribute the code. It replaces the need for more formal agreements like CLAs, streamlining the process and reducing friction.
17 / 30
A new contributor, Maria, sends a message in the project's Slack channel:
'I'm trying to submit this PR but I keep getting rejected. Can someone explain why?'
Which of the following is Maria *most likely* referring to when discussing open-source governance?
Maria's message indicates she is encountering problems with getting her pull request accepted. This likely stems from a misunderstanding or lack of awareness regarding the open-source governance processes – specifically, requirements like Signed-off-by and adherence to code review guidelines. The other options are irrelevant to the core issue.
18 / 30
A pull request description reads:
'This PR implements feature X. Please review and approve. Signed-off-by: [Your Name]'.
What is the primary purpose of including 'Signed-off-by' in this pull request?
The 'Signed-off-by' line is a critical component of open-source governance. It acts as a certification that the contributor has the necessary rights to submit the code – essentially replacing more complex agreements like CLAs by providing a simple, verifiable confirmation. This streamlines acceptance and avoids potential disputes.
19 / 30
During a daily stand-up meeting, Sarah says:
'I'm working on updating the project's governance document. We're moving to a DCO model for contributor agreements, which is simpler and faster than the old CLA.'
What does 'DCO' stand for in this context?
The DCO (Distributed Code Ownership) model is a streamlined approach to contributor agreements used in open-source projects. It's based on adding a 'Signed-off-by' line to the commit message instead of requiring a traditional legal agreement like a CLA. This simplifies the process and reduces administrative overhead.
20 / 30
A project maintainer explains the concept of an RFC (Request For Comments):
'We're using an RFC to discuss a potential change to our plugin API. It's a way for the community to review and provide feedback before we commit to any major changes.'
What is the *primary* goal of creating an RFC?
An RFC (Request For Comments) is a critical process in open-source projects for ensuring that changes are well-considered and aligned with community needs. It's designed to foster discussion, gather feedback, and ultimately result in a more robust and widely accepted technical design.
21 / 30
Reviewer Alex comments on a pull request:
// Adds new feature X
'Hey @john, can you add a Signed-off-by line to this commit? It's standard practice for open source projects and ensures you have the rights to contribute.'
What does Alex mean by 'Signed-off-by'?
Alex is referring to a common practice in open-source projects – using a 'Signed-off-by' line. This isn't a legal document but rather a simple tag in the commit message that certifies the author has the right to contribute the code. It replaces the need for more formal agreements like CLAs, streamlining the process and reducing friction.
22 / 30
A new contributor, Maria, sends a message in the project's Slack channel:
'I'm trying to submit this PR but I keep getting rejected. Can someone explain why?'
Which of the following is Maria *most likely* referring to when discussing open-source governance?
Maria's message indicates she is encountering problems with getting her pull request accepted. This likely stems from a misunderstanding or lack of awareness regarding the open-source governance processes – specifically, requirements like Signed-off-by and adherence to code review guidelines. The other options are irrelevant to the core issue.
23 / 30
A pull request description reads:
'This PR implements feature X. Please review and approve. Signed-off-by: [Your Name]'.
What is the primary purpose of including 'Signed-off-by' in this pull request?
The 'Signed-off-by' line is a critical component of open-source governance. It acts as a certification that the contributor has the necessary rights to submit the code – essentially replacing more complex agreements like CLAs by providing a simple, verifiable confirmation. This streamlines acceptance and avoids potential disputes.
24 / 30
During a daily stand-up meeting, Sarah says:
'I'm working on updating the project's governance document. We're moving to a DCO model for contributor agreements, which is simpler and faster than the old CLA.'
What does 'DCO' stand for in this context?
The DCO (Distributed Code Ownership) model is a streamlined approach to contributor agreements used in open-source projects. It's based on adding a 'Signed-off-by' line to the commit message instead of requiring a traditional legal agreement like a CLA. This simplifies the process and reduces administrative overhead.
25 / 30
A project maintainer explains the concept of an RFC (Request For Comments):
'We're using an RFC to discuss a potential change to our plugin API. It's a way for the community to review and provide feedback before we commit to any major changes.'
What is the *primary* goal of creating an RFC?
An RFC (Request For Comments) is a critical process in open-source projects for ensuring that changes are well-considered and aligned with community needs. It's designed to foster discussion, gather feedback, and ultimately result in a more robust and widely accepted technical design.
26 / 30
Reviewer Alex comments on a pull request:
// Adds new feature X
'Hey @john, can you add a Signed-off-by line to this commit? It's standard practice for open source projects and ensures you have the rights to contribute.'
What does Alex mean by 'Signed-off-by'?
Alex is referring to a common practice in open-source projects – using a 'Signed-off-by' line. This isn't a legal document but rather a simple tag in the commit message that certifies the author has the right to contribute the code. It replaces the need for more formal agreements like CLAs, streamlining the process and reducing friction.
27 / 30
A new contributor, Maria, sends a message in the project's Slack channel:
'I'm trying to submit this PR but I keep getting rejected. Can someone explain why?'
Which of the following is Maria *most likely* referring to when discussing open-source governance?
Maria's message indicates she is encountering problems with getting her pull request accepted. This likely stems from a misunderstanding or lack of awareness regarding the open-source governance processes – specifically, requirements like Signed-off-by and adherence to code review guidelines. The other options are irrelevant to the core issue.
28 / 30
A pull request description reads:
'This PR implements feature X. Please review and approve. Signed-off-by: [Your Name]'.
What is the primary purpose of including 'Signed-off-by' in this pull request?
The 'Signed-off-by' line is a critical component of open-source governance. It acts as a certification that the contributor has the necessary rights to submit the code – essentially replacing more complex agreements like CLAs by providing a simple, verifiable confirmation. This streamlines acceptance and avoids potential disputes.
29 / 30
During a daily stand-up meeting, Sarah says:
'I'm working on updating the project's governance document. We're moving to a DCO model for contributor agreements, which is simpler and faster than the old CLA.'
What does 'DCO' stand for in this context?
The DCO (Distributed Code Ownership) model is a streamlined approach to contributor agreements used in open-source projects. It's based on adding a 'Signed-off-by' line to the commit message instead of requiring a traditional legal agreement like a CLA. This simplifies the process and reduces administrative overhead.
30 / 30
A project maintainer explains the concept of an RFC (Request For Comments):
'We're using an RFC to discuss a potential change to our plugin API. It's a way for the community to review and provide feedback before we commit to any major changes.'
What is the *primary* goal of creating an RFC?
An RFC (Request For Comments) is a critical process in open-source projects for ensuring that changes are well-considered and aligned with community needs. It's designed to foster discussion, gather feedback, and ultimately result in a more robust and widely accepted technical design.
What does the "Open Source Governance Vocabulary" vocabulary exercise cover?
This exercise tests real IT vocabulary related to open source governance vocabulary through 30 multiple-choice questions, each built from realistic workplace sentences rather than abstract definitions.
Is this vocabulary exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is completely free — no account, sign-up, or payment required.
How many questions does this exercise have?
This exercise has 30 questions. Each one shows a real-world sentence or scenario with multiple-choice options and an explanation once you answer.
What happens after I answer a question?
You'll see immediate feedback showing whether your answer was correct, along with a short explanation of why — then a button to move to the next question, and a full results screen at the end.
Can I retry the exercise if I get questions wrong?
Yes. Once you reach the results screen, click "Try again" to reset your answers and go through the exercise from the start as many times as you like.
Do I need to create an account to take this exercise?
No account is needed. Your answers are scored in your browser during the session — nothing is saved to a server, so you can jump straight in.
Is my progress saved if I leave the page?
No — progress within an exercise resets if you navigate away or reload. Each exercise is short enough to complete in a few minutes in one sitting.
Are these vocabulary exercises connected to other topics?
Yes — browse the full vocabulary exercises hub to find related modules covering adjacent IT topics and roles.
How is this different from reading a glossary or blog article?
Exercises like this one are active recall drills — you have to choose the correct term or phrasing yourself, which builds retention faster than passively reading a definition.
Where can I find more vocabulary exercises?
Browse the full Vocabulary exercises hub for hundreds of modules covering Agile, DevOps, security, databases, architecture, and more — organised by IT role and skill.