Based on the double layer embeddedness theory and the knowledge spillovers theory, the E-TOMSDECT analysis model is proposed in this paper. With this model, the risks of China's open source software ecosystem are analyzed systematically. Based on a generalization analysis of international experiences of building open source software ecosystem, some recommendations are proposed. It is shown that our problems include the lack of the key core technology and the ecosystem operation pattern, insufficiencyt motivation, security risks and weak leadership in the international open source software ecosystem, the coordination of the software and the hardware, the inadequate software value evaluation system, the lack of professional talents for ecosystem operation, and underutilization of international experiencere. The urgent tasks in China include building a three-in-one leading core on emerging fields, strengthening the coordination of the software and the hardware, building the security risk assessment and emergency response mechanism, and strengthening the talent training.

open source software ecosystem  /  double layer embeddedness theory  /  knowledge spillovers  /  risk analysis  /  experience generalization