CHAPTER IV. THE TOWER OF THE WOODBEY-GOODS. THE TOWER OF MYSTERY It was very rough on Dora having her foot bad, but we took it in turns to stay in with her, and she was very decent about it. Daisy was most with her. I do not dislike Daisy, but I wish she had been taught how to play, because Dora is rather like that naturally, and sometimes I have thought that Daisy makes her worse. I talked to Albert's uncle about it one day, when the others had gone to church, and I did not go because of earache, and he said he came from reading the wrong sort of books partly. She has read ministering children, and Anna Ross, or the Orphan of Waterloo, and ready work for willing hands, and Elsie, or like a little candle, and even a horrid little blue book about the something or other of little sins. After this conversation Oswald took care she had plenty of the right sort of books to read, and he was surprised and pleased when she got up early one morning to finish Monte Cristo. Oswald felt that he was really being useful to a suffering fellow creature when he gave Daisy books that were not all about being good. A few days after Dora was laid up, Alice called a council of the would-be goods, and Oswald and Dickey attended with darkly clouded brows. Alice had the minute book, which was an exercise book that had not much written in it. She had begun at the other end.  Dora and a sofa had been carried out onto the lawn, and we were on the grass. It was very hot and dry, we had sherbet. Alice read. Society of the would-be goods. We have not done much. Dickey mended a window, and we got the milk-pan out of the moat that dropped through where he mended it. Dora, Oswald, Dickey and me got upset in the moat. This was not goodness. Dora's foot was hurt. We hope to do better next time. Then came Noel's poem. We are the would-be-good society. We are not good yet, but we mean to try, and if we try, and if we don't succeed, it must mean we are very bad indeed. This sounded so much writer than Noel's poetry generally does, that Oswald said so, and Noel explained that Denny had helped him. He seems to know the right length for lines of poetry. I suppose it comes of learning so much at school, Noel said. Then Oswald proposed that anyone should be allowed to write in the book if they found out anything good that anyone else had done, but not things that were public acts, and nobody was to write about themselves or anything other people told them, only what they found out. After a brief jaw the others agreed, and Oswald felt, not for the first time in his young life, that he would have made a good diplomatic hero to carry dispatches and out to it to the other side. For now he had put it out of the minute book's power to be the kind of thing readers of ministering children would have wished. And if anyone tells other people any good thing he's done, he is to go to Coventry for the rest of the day. And Denny remarked, we shall do good by stealth and blush to find it shame. After that nothing was written in the book for some time. I looked about, and so did the others, but I never caught anyone in the act of doing anything extra, although several of the others have told me since of things they did at this time and really wondered nobody had noticed. I think I said before, that when you tell a story you cannot tell everything, it would be silly to do it, because ordinary kinds of play are dull to read about, and the only other thing is meals, and to dwell on what you eat is greedy and not like a hero at all. A hero is always contented with a venison pasty and a horn of sack. All the same the meals were very interesting, with things you do not get at home, lent pies with custard and currants in them, sausage rolls and fleed cakes and raisin cakes and apple turnovers and honeycomb and syllabubs, besides as much new milk as you cared about, and cream now and then, and cheese always on the table for tea. Father told Mrs. Pettigrew to get what meals she liked, and she got these strange but attractive foods. In a story about would-be goods, it is not proper to tell of times when only some of us were naughty, so I will pass likely over the time when Noel got up the kitchen chimney and put three bricks and an old Starling's nest and about a ton of soot down with him when he fell. They never used the big chimney in the summer, but cook in the wash-house. Nor do I wish to dwell on what H.O. did when he went into the dairy. I do not know what his motive was, but Mrs. Pettigrew said she knew, and she locked him in and said if it was cream he wanted he should have enough and she wouldn't let him out till tea-time. The cat had also got into the dairy for some reason of her own, and when H.O. was tired of whatever he went in for, he poured all the milk into the churn and tried to teach the cat to swim in it. He must have been desperate. The cat did not even try to learn, and H.O. had the scars on his hands for weeks. I do not wish to tell tales of H.O., for he is very young, and whatever he does he always catches it for, but I will just allude to our being told not to eat the green gauges in the garden. And we did not. And whatever H.O. did it was Noel's fault, for Noel told H.O. that green gauges would grow again all right if you did not bite as far as the stone, just as wounds are not mortal except when you are pierced through the heart. So the two of them bit bites out of every green gauge they could reach, and of course the pieces did not grow again. Oswald did not do these things, but then he is older than his brothers. The only thing he did just about then was making a booby-trap for Mrs. Pettigrew when she had locked up H.O. in the dairy, and unfortunately it was the day she was going out in her best things, and part of the trap was a can of water. Oswald was not willingly vicious, but it was a light and thoughtless act which he had every reason to be sorry for afterwards, and he is sorry even without those reasons, because he knows it is un-gentlemanly to play tricks on women. I remember Mother telling Dora and me when we were little that you ought to be very kind and polite to servants, because they have to work very hard and do not have so many good times as we do. I used to think about Mother more at the mot-house than I did at Blackheath, especially in the garden. She was very fond of flowers, and she used to tell us about the big garden where she used to live. And I remember Dora and I helped her to plant seeds, but it's no use wishing. She would have liked that garden, though. The girls and the white mice did not do anything boldly wicked, though of course they used to borrow Mrs. Pettigrew's needles, which made her very nasty. Needles that are borrowed might just as well be stolen, but I say no more. I have only told you about these things to show the kind of events which occurred on the days I don't tell you about. On the whole, we had an excellent time. It was on the day that we had the pillow fight that we went for the long walk. Not the pilgrimage, that is another story. We did not mean to have a pillow fight. It is not usual to have them after breakfast, but Oswald had come up to get his knife out of the pocket of his eatons to cut some wire we were making rabbit snares of. It is a very good knife, with a file in it as well as a corkscrew and other things. And he did not come down at once because he was detained by having to make an apple pie bed for Dickey. Dickey came up after him to see what we was up to, and when he did see he buzzed a pillow at Oswald and the fight began. The others, hearing the noise of battle from afar, hastened to the field of action, all except Dora, who couldn't because of being laid up with her foot, and Daisy, because she is a little afraid of us still when we are all together. She thinks we are rough. This comes of having only one brother. Well, the fight was a fine one. Alice backed me up, and Noel and H.O. backed Dickey, and Denny heaved a pillow or two, but he cannot shy straight, so I don't know which side he was on. And just as the battle raged most fiercely, Mrs. Pettigrew came in, and snatched the pillows away, and shocked those of the warriors who were small enough for it. She was rough, if you like. She also used language I sort of thought she would be above. She said, Dracked you, and Drabbit you. The last is a thing I have never heard said before.   I wonder you haven't more sense a great girl like you. She said this to Alice, and Alice answered gently as we are told to do. I really am awfully sorry. We forgot about the headache. Don't be cross, Mrs. Pettigrew. We didn't mean to. We didn't think. You never do, she said, and her voice, though grumpy, was no longer violent. Why on earth you can't take yourselves off for the day I don't know? We all said, But may we? She said, Of course you may. Now put on your boots and go for a good long walk, and I'll tell you what, I'll put you up a snack, and you can have an egg to your tea to make up for missing your dinner. Now, don't go clattering about the stairs and passages. There's good children. See if you can't be quiet this once, and give the good gentleman a chance with his copying.  Her bark is worse than her bite. She does not understand anything about writing books, though. She thinks Albert's uncle copies things out of printed books when he's really writing new ones. I wonder how she thinks printed books get made first of all. Many servants are like this. She gave us the snack in a basket, and sixpence to buy milk with. She said any of the farms would let us have it, only most likely it would be skim.  I did not know till after I had left the farm gate open and the hens had got into the garden that these feathered bipeds display great partiality for the young buds of plants of the genus Viola to which they are extremely destructive. I was told that by the gardener. I looked it up in the gardening book afterwards to be sure he was right. You do learn a lot of things in the country. We went through the garden as far as the church, and then we rested a bit in the porch, and just looked into the basket to see what the snack was. It proved to be sausage rolls and queen cakes, and a lent pie in a round tin dish, and some hard-boiled eggs, and some apples. We all ate the apples at once, so as not to have to carry them about with us. The churchyard smells awfully good. It is the wild time that grows on the graves. This is another thing we did not know before we came into the country. Then the door of the church tower was ajar, and we all went up. It had always been locked before when we had tried it. We saw the ringers loft, where the ends of the bell ropes hang down with long furry handles to them, like great caterpillars, some red and some blue and white. But we did not pull them.  There were heaps of straw and sticks on the window-ledges. We think they were owls' nests, but we did not see any owls. Then the tower stairs got very dark and narrow, and we went on up, and we came to a door and opened it suddenly. And it was like being hit in the face. The light was so sudden. And there we were, on the top of the tower, which is flat, and people have cut their names on it, and a turret at one corner, and a low wall all round up and down, like castle battlements. And we looked down, and saw the roof of the church, and the leds, and the churchyard, and our garden, and the moat house, and the farm, and Mrs. Simpkin's cottage, looking very small, and other farms looking like toy things out of boxes. And we saw cornfields, and meadows, and pastures. Pasture is not the same thing as a meadow, whatever you may think. And we saw the tops of trees and hedges, looking like a map of the United States, and villages, and a tower that did not look very far away, standing by itself on the top of a hill. Alice pointed to it, and said, What's that? It's not a church, said Noel, because there's no churchyard. Perhaps it's a tower of mystery that covers the entrance to a subterranean vault with treasure in it. Dicky said, Subterranean fiddle-stick, and a water works more likely. Alice thought that perhaps it was a ruined castle, and the rest of its crumbling walls were concealed by ivy the growth of years. Oswald could not make up his mind what it was, so he said, Let's go and see. We may as well go there as anywhere. So we got down out of the church tower, and dusted ourselves and set off. The tower of mystery showed quite plainly from the road, now that we knew where to look for it, because it was on top of a hill. We began to walk, but the tower did not seem to get any nearer, and it was very hot. So we sat down in a meadow where there was a stream in the ditch, and ate the snack. We drank the pure water from the brook out of our hands, because there was no farm to get milk at just there, and it was too much fag to look for one. And besides, we thought we might as well save the sixpence. Then we started again, and still the tower looked as far off as ever. Denny began to drag his feet, though he had bought a walking stick which none of the rest of us had, and said, I wish a cart would come along. We might get a lift. He knew all about getting lifts, of course, from having been in the country before. He is not quite the white mouse we took him for at first. Of course, when you live in Lewisham or Blackheath, you learn other things. If you asked for a lift in Lewisham High Street, your only reply would be jeers. We sat down on a heap of stones, and decided that we would ask for a lift from the next cart, whichever way it was going. It was while we were waiting that Oswood found out about plantain seeds being good to eat. When the sound of wheels came, we remarked with joy that the cart was going towards the Tower of Mystery. It was a cart a man was going to fetch a pig-home in. Denny said, I say you might give us a lift, will you? The man, who was going for the pig, said, What? All that little lot! But he winked at Alice, and we saw that he meant to aid us on our way. So we climbed up, and he whipped up the horse, and asked us where we were going.  We want to go to the Tower, Alice said. Is it a ruin or not? It ain't no ruin, the man said, no fear of that. The man what built it, he left so much a year to be spent on repairing of it. Money that might have put bread in on his folks' mouths. We asked if it was a church then, or not. Church, he said? Not it. It's more of a tombstone from all I can make out. They do say there was a curse on him that built it, and he wasn't to rest in earth or sea, so he's buried halfway up the Tower, if you can call it buried. Can you go up it? Oswald asked. Lord, love you, yes, a fine view from the top, they say. I've never been up myself, though I've lived in sight of it. Man and boy, these sixty-three years, come harvest. Alice asked whether you had to go past the dead and buried person to get to the top of the Tower, and could you see the coffin? No, no, the man said. That's all hid away behind a slab of stone that is, with reading on it. You've got no call to be afraid, Missy. It's daylight all the way up, but I wouldn't go there after dark so I wouldn't. It's always open, day and night, and they say tramps sleep there now and again. Anyone who likes can sleep there, but it wouldn't be me. We thought that it would not be us either, but we wanted to go more than ever, especially when the man said. My own great-uncle of the mother's side, he was one of the masons that set up the stone slab.   My uncle said his hair had grown out from under his wig and his beard was down to the toes of him. My uncle, he always upheld that the dead man was no deader than you and me, but was in a sort of fit, a transit, I think they call it, and looked for him to waken into life again some day. But the doctor said not. It was only something done to him like Pharaoh in the Bible before he was buried. Alice whispered to Oswald that we shouldn't be late for tea, and wouldn't it be better to go back now directly? But he said, if you're afraid, say so, and you needn't come in anyway, but I'm going in. The man who was going for the pig put us down at a gate quite near the tower. At least it looked so until we began to walk again.  We were rather quiet going through the wood. What we had heard made us very anxious to see the tower, all except Alice, who would keep talking about tea, though not a greedy girl by nature. None of the others encouraged her, but Oswald thought himself that we had better be home before dark. As we went up the path through the wood we saw a poor wayfarer with dusty bare feet sitting on the bank. He stopped us, and said he was a sailor, and asked for a trifle to help him to get back to his ship. I did not like the look of him much myself. But Alice said, oh, the poor man, do let's help him, Oswald. So we held a hurried council, and decided to give him the milk-sixpence. Oswald had it in his purse, and he had to empty the purse into his hand to find the sixpence, for that was not all the money he had by any means. Noel said afterwards that he saw the wayfarer's eyes fasten greedily upon the shining pieces as Oswald returned them to his purse. Oswald has to own that he purposely let the man see that he had more money, so the man may not feel shy about accepting so large a sum of sixpence. The man blessed our kind hearts, and we went on. The sun was shining very brightly, and the Tower of Mystery did not look at all like a tomb when we got to it. The bottom story was on arches, all open, and ferns and things grew underneath. There was a round stone stair going up the middle. Alice began to gather ferns while we went up, but when we had called out to her that it was as the pig-man had said, and daylight all the way up, she said, all right, I'm not afraid. I'm only afraid of being late home, and came up after us. And perhaps, though not downright manly truthfulness, this was as much as you could expect from a girl. There were holes in the little tower of the staircase to let light in, and the top of it was a thick door with iron bolts. We shot these back, and it was not fear but caution that made Oswald push open the door so very slowly and carefully, because, of course, a stray dog or cat might have got shut in nearby accident, and it would have startled Alice very much if it had jumped out on us. When the door was opened we saw that there was no such thing. It was a room with eight sides. Denny says it is the shape called Octogenarian, because a man named Octavius invented it. There were eight large arched windows with no glass only stonework like in churches. The room was full of sunshine, and you could see the blue sky through the windows, but nothing else because they were so high up. It was so bright we began to think the pig-man had been kidding us. Under one of the windows was a door. We went through, and there was a little passage and then a turret-twisting stair like in the church, but quite light with windows. When we had gone some way up this we came to a sort of landing, and there was a block of stone let into the wall, polished. Denny said it was Aberdeen graphite, with gold letters cut in it. It said, Here lies the body of Mr Richard Ravenel, born 1720, died 1779. And a verse of poetry. Here lie I between earth and sky, think upon me, dear passer-by, and you who do my tombstone see, be kind to say a prayer for me. How horrid Alice said, do let's go home. We may as well go to the top, Dicky said, just to say we've been. And Alice is no funk, so she agreed, though I could see she did not like it. Up at the top it was like the top of the church-tower, only octogenarian in shape instead of square. Alice got all right there, because you cannot think much about ghosts and nonsense when the sun is shining bang down on you at four o'clock in the afternoon, and you can see red farm-roofs between the trees and the safe-white roads with people in carts like black ants crawling. It was very jolly. But we felt we ought to be getting back, because tea is at five, and we could not hope to find lifts both ways. So we started to go down. Dicky went first, then Oswald, then Alice, and Acho had just stumbled over the top-step and saved himself by Alice's back, which nearly upset Oswald and Dicky when the hearts of all stood still, and then went on by leaps and bounds, like the good work in missionary magazines. For down below us, in the tower where the man whose beard grew down to his toes after he was dead was buried, there was a noise, a loud noise, and it was like a door being banged and bolts fastened. We tumbled over each other to get back into the open sunshine on the top of the tower, and Alice's hand got jammed between the edge of the doorway at Acho's boot. It was bruised black and blue, and another part bled, but she did not notice it till long after. We looked at each other, and Oswald said in a firm voice—at least I hope it was—what was that? He has wakened up, Alice said. Oh, I know he has! Of course there is a door for him to get out by when he wakes. He'll come up here. I know he will. Dicky said, and his voice was not at all firm. I noticed that at the time. It doesn't matter if he's alive. Unless he's come to life a raving lunatic, Noel said, and we all stood with our eyes on the doorway of the turret, and held our breath to hear. But there was no more noise. Then Oswald said, and nobody ever put it in the golden deed-book, though they own that it was brave and noble of him. He said, perhaps it was only the wind blowing one of the doors, too. I'll go down and see, if you will, Dick. Dicky only said, the wind doesn't shoot bolts. A bolt from the blue, said Denny to himself, looking up at the sky. His father is a sub-editor. He had gone very red, and he was holding on to Alice's hand. Suddenly he stood up quite straight and said, I'm not afraid. I'll go and see. This was afterwards put in the golden deed-book. It ended in Oswald and Dicky and Denny going. Denny went first because he said he would rather, and Oswald understood this and let him go. If Oswald had pushed first, it would have been like Sir Lancelot refusing to let a young knight win his spurs. Oswald took good care to go second himself, though. The others never understood this. You don't expect it from girls. But I did think father would have understood without Oswald telling him, which of course he never could. We all went slowly. At the bottom of the turret stairs we stopped short, because the door there was bolted fast and would not yield to shoves, however desperate and united. Only now somehow we felt that Mr. Richard Ravenall was all right and quiet, but that someone had done it for a lark, or perhaps not known about anyone being up there. So we rushed up, and Oswald told the others in a few hasty but well-chosen words, and we all leaned over between the battlements and shouted, Hi! You there! Then, from under the arches of the quite downstairs part of the tower, a figure came forth, and it was the sailor who had had our milk sixpence. He looked up, and he spoke to us. He did not speak loud, but he spoke loud enough for us to hear every word quite plainly. He said, Drop that! Oswald said, Drop what? He said, That rowl. Oswald said, Why? He said, Because if you don't I'll come up and make you a pretty quick two, so I tell you. Dicky said, Did you bolt the door? The man said, I did so my young cock. Alice said, and Oswald wished to goodness she had held her tongue, because he saw right enough the man was not friendly. Oh, do come and let us out, do please! While she was saying it, Oswald suddenly saw that he did not want the man to come up, so he scurried down the stairs because he thought he had seen something on the door on the top side, and sure enough there were two bolts, and he shot them into their sockets. This bold act was not put into the Golden Deed book, because when Alice wanted to, the others said it was not good of Oswald to think of this, but only clever. I think sometimes in moments of danger and disaster it is as good to be clever as it is to be good, but Oswald would never demean himself to argue about this. When he got back the man was still standing staring up. Alice said, oh Oswald, he says he won't let us out unless we give him all our money, and we might be here for days and days and all night as well. No one knows where we are to come and look for us, or do let's give it to him all. She thought the lion of the English nation, which does not know when it is beaten, would be ramping in her brother's breast, but Oswald kept calm. He said, all right, and he made the others turn out their pockets. Denny had a bad shilling with a head on both sides, and three apents. H.O. had a hape-knee. Noel had a French penny, which is only good for chocolate machines at railway stations. Dicky had Tempent's hape-knee, and Oswald had a two-shilling piece of his own that he was saving up to buy a gun with. Oswald tied the whole lot up in his handkerchief, and looking over the battlements, he said, you are an ungrateful beast. We gave you six pence freely of our own will. The man did look a little bit ashamed, but he mumbled something about having his living to get. Then Oswald said, here you are, catch, and he flung down the handkerchief with the money in it.  Look here, he called out. This won't do, young shaver. I want those there shiners I've seen in your purse. Come, chuck them along. Then Oswald laughed. He said, I shall know you again anywhere, and you'll be put in prison for this. Here are the shiners. And he was so angry, he chucked down purse and all. The shiners were not real ones, but only card counters that looked like sovereigns on one side. Oswald used to carry them in his purse so as to look affluent. He does not do this now. When the man had seen what was in the purse, he disappeared under the tower, and Oswald was glad of what he had done about the bolts, and he hoped they were strong as the ones on the other side of the door. They were. We heard the man kicking and pounding at the door, and I am not ashamed to say that we were all holding on to each other very tight. I am proud, however, to relate that nobody screamed or cried. After what appeared to be long years, the banging stopped, and presently we saw the brute going away among the trees. Then Alice did cry, and I do not blame her. Then Oswald said, It's no use. Even if he's undone the door, he may be in ambush. We must hold on here till somebody comes. Then Alice, speaking chokerly because she had not quite done crying, let's wave a flag. By the most fortunate accident she had on one of her Sunday petticoats, though it was Monday. This petticoat is white. She tore it out at the gathers, and we tied it to Denny's stick, and took turns to wave it. We had laughed at his carrying a stick before, but we were very sorry now that we had done so. And the tin dish the lent pie was baked in, we polished with our handkerchiefs and moved it about in the sun so the sun might strike on it and signal our distress to some of the outlaying farms. This was perhaps the most dreadful adventure that had ever happened to us. Even Alice had now stopped thinking of Mr. Richard Ravenall and thought only of the lurker in ambush. We all felt our desperate situation keenly. I must say Denny behaved like anything but a white mouse. When it was the others turned to wave, he sat on the leads of the tower and held Alice's and Noel's hands and said poetry to them, yards and yards of it. By some strange fatality it seemed to comfort them. It wouldn't have me. He said, the battle of the Baltic and Grey's elegy right through, though I think he got it wrong in places, and the revenge and Macaulay's thing about Lars Pulsina and the Nine Gods. And when it was his turn he waved like a man. I will try not to call him a white mouse any more. He was a brick that day and no mouse. The sun was low in the heavens and we were sick of waving and very hungry when we saw a cart in the road below. We waved like mad and shouted and Denny screamed exactly like a railway whistle, a thing none of us had known before that he could do. And the cart stopped and presently we saw a figure with a white beard among the trees. It was our pig-man. We bellowed the awful truth to him and when he had taken it in he thought at first we were kidding. He came up and let us out. He had got the pig. Luckily it was a very small one and we were not particular.  You may think we talked it over on the way. Not us. We went to sleep among the pig and before long the pig-man stopped and got us to make room for Alice and Denny. There was a net over the cart. I was never so sleepy in my life though it was not more than bedtime. Generally after anything exciting you are punished. But this could not be because we had only gone for a walk exactly as we were told. There was a new rule made though. No walks except on the high roads and we were always to take pincher and either Lady the Deerhound or Martha the Bulldog. We generally hate rules but we did not mind this one. Father gave Denny a gold pencil case because he was first to go down into the tower. Oswood does not grudge Denny this though some might think he deserved at least a silver one but Oswood is above such paltry jealousies. This is the story of one of the most far reaching and influential naughty things we ever did in our lives. We did not mean to do such a deed and yet we did do it. These things will happen to us in the future. We will never be able to do such a deed again. We will never be able to do such a deed again. We will never be able to do such a deed again. We did not mean to do such a deed and yet we did do it. These things will happen with the best regulated consciences. The story of this rash and fatal act is intimately involved, which means all mixed up anyhow, with the private affair of Oswood's and the one cannot be revealed without the other. Oswood does not particularly want his story to be remembered but he wishes to tell the truth and perhaps it is what father calls a wholesome discipline to lay bare the awful fact. It was like this. On Alice's and Noel's birthday we went on the river for a picnic. Before that we had not known that there was a river so near us. Afterwards father said he wished we had been allowed to remain on our pristine ignorance, whatever that is. And perhaps the dark hour did dawn when we wished so too. But a truce to vain regrets. It was rather a fine thing in birthdays. The uncle sent a box of toys and sweets.  Besides that Alice had a knife, a pair of shut-up scissors, a silk handkerchief, a book. It was the Golden Age and is A1 except where it gets mixed with grown-up nonsense. Also a work case lined with pink plush, a boot-bag, which no one in their senses would use because it had flowers in wool all over it. And she had a box of chocolates and a musical toy that played The Man Who Broke and Two Other Tunes and two pairs of kid-gloves for church and a box of writing-paper pink with Alice on it in gold writing and an egg-coloured red that said A-Bastable in ink on one side. These gifts were the offerings of Oswald, Dora, Dickie, Albert's uncle, Daisy, Mr. Fawkes, our own robber, Noel, H.O., Father, and Denny. Mrs. Pettigrew gave the egg. It was a kindly housekeeper's friendly token. I shall not tell you about the picnic on the river because the happiest times form but dull reading when they are written down. I will merely state that it was prime. Though happy, the day was uneventful. The only thing exciting enough to write about was in one of the locks where there was a snake, a viper. It fell asleep in a warm, sunny corner of the lock-gate, and when the gate was shut it fell off into the water. Alice and Dora screamed hideously. So did Daisy, but her screams were thinner. The snake swam round and round all the time our boat was in the lock. It swam with four inches of itself. The head-end reared up out of the water, exactly like car in the Jungle Book, so we know Kipling is a true author and no rotter. We were careful to keep our hands well inside the boat. A snake's eyes strike terror into the boldest breast. When the lock was full Father killed the viper with a bow-took. I was sorry for it myself. It was indeed a venomous serpent, but it was the first we had ever seen except at the zoo. And it did swim most awfully well. Directly the snake had been killed. H.O. reached out for its corpse, and the next moment the body of our little brother was seen wriggling convulsively on the boat's edge. This exciting spectacle was not of a lasting nature. He went right in. Father clawed him out. He is very unlucky with water. Being a birthday but little was said. H.O. was wrapped in everybody's coats and did not take any cold at all. This glorious birthday ended with an iced cake and ginger wine and drinking hells. Then we played whatever we liked. There had been rounders during the afternoon. It was a day for ever to be marked by memory's brightest—what's his name? I should not have said anything about the picnic, but for one thing. It was the thin end of the wedge. It was the all-powerful lever that moved but too many events. You see, we were no longer strangers to the river. And we went there whenever we could. Only we had to take the dogs and promise no bathing without grown-ups. But paddling in backwaters was allowed. I say no more. I have not enumerated Noel's birthday presents, because I wish to leave something to the imagination of my young readers. The best authors always do this. If you will take the large red catalogue of the army and navy stores, and just make a list of about fifteen of the things you would like best, priced from two shillings to twenty-five shillings, you will get a very good idea of Noel's presents, and it will help you to make up your mind in case you're asked just before your next birthday what you really need. One of Noel's birthday presents was a cricket-ball. He cannot bowl for nuts, and it was a first-rate ball. So some days after the birthday, Oswald offered him to exchange it for a coconut he had won at the fair, and two pencils—new—and a brand-new notebook. Oswald thought, and he still thinks, that this was a fair exchange, and so did Noel at the time, and he agreed to it, and was quite pleased till the girls said it wasn't fair, and Oswald had the best of it. And then that young beggar Noel wanted the ball back, but Oswald, though not angry, was firm. You said it was a bargain, and you shook hands on it, he said, and he said it quite kindly and calmly.  If they had not said that, Oswald might yet have consented to let Noel have the beastly ball, but now of course he was not going to. He said, oh yes, I dare say, and then you'd be wanting the coconut and things again the next minute. No I shouldn't, Noel said. It turned out afterwards he and H.O. had eaten the coconut, which only made it worse, and it made them worse too, which is what the book calls poetic justice. Dora said, I don't think it was fair, and even Alice said, do let him have it back, Oswald. I wish to be just to Alice, she did not know then about the coconut having been secretly warfed up. We were in the garden. Oswald felt all the feelings of the hero when the opposing forces gathered about him are opposing as hard as ever they can. He knew he was not unfair, and he did not like to be jawed at just because Noel had eaten the coconut and wanted the ball back. Though Oswald did not know then about the eating of the coconut, but he felt the injustice in his soul all the same. Noel said afterwards he meant to offer Oswald something else to make up for the coconut, but he said nothing about this at the time. Give it me, I say, Noel said, and Oswald said, shan't. Then Noel called Oswald names, and Oswald did not answer back, but just kept smiling pleasantly and carelessly throwing up the ball and catching it again with an air of studded indifference. It was Martha's fault that what happened happened. She is the bulldog and very stout and heavy.  You know how sagacious they are. Well, Martha knocked the ball out of Oswald's hands, and it fell on the grass, and Noel pounced on it like a hooded falcon on its prey. Oswald would scorn to deny that he was not going to stand this, and the next moment the two were rolling over on the grass, and very soon Noel was made to bite the dust and serve him right. He is old enough to know his own mind. Then Oswald walked slowly away with the ball, and the others picked Noel up and consoled the beaten, but Dickie would not take either side. And Oswald went up into his own room and lay on his bed and reflected gloomy reflections about unfairness. Presently he thought he would like to see what the others were doing without their knowing he cared. So he went into the linen room and looked out of its window, and saw they were playing kings and queens, and Noel had the biggest paper crown and the longest stick scepter. Oswald turned away without a word, for it really was sickening. Then suddenly his weary eyes fell upon something they had not before beheld. It was a square trapdoor in the ceiling of the linen room. Oswald never hesitated. He crammed the cricket ball into his pocket and climbed up the shelves and unbolted the trapdoor and shoved it up and pulled himself up through it. Though above all was dark and smelt of spiders, Oswald fearlessly shut the trapdoor down again before he struck a match. He always carries matches. He is a boy fertile in every subtle expedient. Then he saw he was in the wonderful mysterious place between the ceiling and the roof of the house. The roof is beams and tiles. Slits of light show through the tiles here and there. The ceiling, on its other and top side, is made of rough plaster and beams. If you walk on the beams it is all right.  Oswald found this out later, but some fine instinct now taught the young explorer where he ought to tread and where not. It was splendid. He was still very angry with the others and he was glad he had found out a secret they jolly well didn't know. He walked along a dark narrow passage every now and then cross beams barred his way and he had to creep under them. At last a small door loomed before him with cracks of light under and over. He drew back the rusty bolts and opened it. It opened straight onto the leads, a flat place between two steep red roofs with a parapet two feet high back and front so that no one could see you. It was a place no one could have invented better than if they had tried for hiding in. Oswald spent the whole afternoon there. He happened to have a volume of Percy's anecdotes in his pocket, the one about lawyers as well as a few apples. While he read he fingered the cricket ball and presently it rolled away and he thought he would get it by and by. When the T-bell rang he forgot the ball and went hurriedly down for apples do not keep the inside from the pangs of hunger. Noel met him on the landing, got red in the face and said, It wasn't quite fair about the ball because H.O. and I had eaten the coconut. You can have it. I don't want your beastly ball, Oswald said. I only hate unfairness. However, I don't know where it is just now. When I find it you shall have it to bowl with as often as you want. Then you're not waxy. And Oswald said no and they went in to tea together. So that was all right. There were raisin cakes for tea. Next day we happened to want to go down to the river quite early. I don't know why. This is called fate or destiny. We dropped in at the Rose and Crown for some ginger beer on the way. The landlady is a friend of ours and lets us drink it in her back parlour instead of in the bar which would be improper for girls. We found her awfully busy making pies and jellies and her two sisters were hurrying about with great hams and pairs of chickens and rounds of cold beef and lettuce and pickled salmon and trays of crockery and glasses. It's for the angling competition, she said. We said, what's that? Why, she said, slicing cucumber like beautiful machinery while she said it. A lot of anglers come down some particular day and fish one particular bit of the river and the one that catches most fish gets the prize.  We said, couldn't we help? But she said, oh no, thank you indeed not please. I really am so I don't know which way to turn. Do run along like deers. So we ran along like those timid but graceful animals. Need I tell the intellectual reader that we went straight off to the pen above Stoneham Lock to see the anglers competing? Angling is the same thing as fishing. I am not going to try and explain locks to you. If you've never seen a lock you could never understand even if I wrote it in words of one syllable and pages and pages long. And if you have you'll understand without my telling you. It is harder than Euclid if you don't know beforehand. But you might get a grown up person to explain it to you with books or wooden bricks. I will tell you what a pen is because that is easy. It is the bit of river between one lock and the next. In some rivers pens are called reaches but pen is the proper word. We went along the towing path. It is shady with willows, aspens, alders, elders, oaks and other trees. On the bank are flowers, yarrow, meadow-sweet, willow-herb, loose strife and ladies' bed-straw. Oswald learned the names of all these trees and plants on the day of the picnic. The others didn't remember them but Oswald did. He is a boy of what they call relenting memory. The anglers were sitting here and there on the shady bank among the grass and the different flowers I have named. Some had dogs with them and some umbrellas and some had only their wives and families. We should have liked to talk to them and ask them how they liked their lot and what kinds of fish there were and whether they were nice to eat. But we did not like to. Denny had seen anglers before and he knew they liked to be talked to but though he spoke to them quite like to equals he did not ask the things we wanted to know. He just asked them whether they had any luck and what bait they used and they answered him back politely. I am glad I am not an angler. It is an immovable amusement and as often as not, no fish to speak of after all. Daisy and Dora had stayed at home. Dora's foot was nearly well but they seemed really to like sitting still. I think Dora likes to have a little girl to order about. Alice would never stand it. When we got to Stonham Lock Denny said he should go home and fetch his fishing rod. H.O. went with him. This left four of us. Oswald, Alice, Dickie and Noel. We went on down the towing-path. The lock shuts up. That sounds as if it were like the lock on a door but it is very otherwise between one pen of the river and the next. The pen where the anglers were was full right up over the roots of the grass and flowers but the pen below was nearly empty. You can see the poor river's bones, Noel said. And so you could. Stones and mud and dry branches and here and there an old kettle or a tin pail with no bottom to it that some bargee had chucked in. From walking so much along the river we knew many of the bargees. Bargees are the captains and crews of the big barges that are pulled up and down the river by slow horses. Barges do not swim. They walk on the towing-path with a rope tied to them and the other end to the barge so it gets pulled along. The barges we knew were a good friendly sort and used to let us go all over the barges when they were in a good temper. They were not at all the sort of bullying cowardly fiends in human form that the young hero at Oxford fights a crowd of single-handed in books. The river does not smell nice when its bones are showing but we went along down because Oswald wanted to get some cobbler's wax in Folding Village for a bird-net he was making. But just above Folding Lock where the river is narrow and straight we saw a sad and gloomy sight. A big barge sitting flat on the mud because there was not enough water to float her. There was no one on board but we knew by a red flannel waistcoat that was spread out to dry on top that the barge belonged to a friend of ours. Then Alice said, they have gone to find the man who turns on the water to fill the pen.  What a lovely surprise it would be if they came back to find their barge floating high and dry on a lot of water. Do let's do it. It's a long time since any of us did a kind action deserving of being put in the Book of Golden Deeds. We had given that name to the minute book of that beastly society of the would-be goods. Then you could think of the book if you wanted to without remembering the society. I always tried to forget both of them. Oswood said, but how? You don't know how, and if you did we haven't got a crowbar. I cannot help telling you that locks are opened with crowbars. You push and pull till a thing goes up and the water runs through. It's rather like the little sliding door in the big door of a hen house. I know where the crowbar is, Alice said. Dickey and I were down here yesterday when you were—she was going to say Sulking, I know—but she remembered manners air too late so Oswood bears her no malice. She went on, yesterday, when you were upstairs, and we saw the water-tender open the lock and the whiz-slooses. It's quite easy, isn't it, Dickey? As easy as kiss your hand, said Dickey, and what's more, I know where he keeps the other thing he opens the slooses with. I vote we do. Do let's if we can, Noll said, and the bargees will bless the names of their unknown benefactors. They might make a song about us and sing it on winter nights as they pass round the wassail-bowl in front of the cabin fire. Noll wanted to very much, but I don't think it was all together for generousness, but because he wanted to see how the slooses opened. Yet perhaps I do but wrong the boy. We sat and looked at the barge a bit longer, and then Oswood said, well, he didn't mind going back to the lock and having a look at the crowbars. You see, Oswood did not propose this. He did not even care very much about it when Alice suggested it. But when we got to Stonham Lock, and Dickey dragged the two heavy crowbars from among the elder bushes behind a fallen tree, and began to pound away at the sluice of the lock, Oswood felt it would not be manly to stand idly apart, so he took his turn. It was very hard work, but we opened the lock slooses, and we did not drop the crowbar into the lock either, as I have heard of being done by older and sillier people. The water poured through the slooses all green and solid, as if it had been cut with a knife, and where it fell on the water underneath the white foam spread like a moving counter-pane. When we had finished the lock, we did the weir, which is wheels and chains, and the water pours through over the stones in a magnificent waterfall and sweeps out all round the weir-pool. The sight of the foaming water-falls was quite enough reward for our heavy labours, even without the thought of the unspeakable gratitude that the bargees would feel to us when they got back to their barge and found her no longer a stick in the mud but bounding on the free bosom of the water. When we had opened all the slooses, we gazed a while on the beauties of nature, and then went home because we thought it would be more truly noble and good not to wait to be thanked for our kind and devoted action, and besides it was nearly dinner-time, and Oswald thought it was going to rain. On the way home we agreed not to tell the others, because it would be like boasting of our good acts. They will know all about it, Noel said, when they hear us being blessed by the grateful bargees, and the tale of the unknown helpers is being told by every village fireside, and then we can write it in the good deed-book. Then we went home. Denny and Ajo had thought better of it, and they were fishing in the moat. They did not catch anything. Oswald is very weather-wise, at least, so I have heard it said, and he had thought there would be rain. There was. It came on while we were at dinner, a great strong thundering rain coming down in sheets, the first rain we had had since we came to the moat-house. We went to bed, as usual. No presentiment of the coming awfulness clouded our young mirth. I remember Dicky and Oswald had a wrestling match, and Oswald won. In the middle of the night, Oswald was awakened by a hand on his face. It was a wet hand and very cold.  Have you got any matches?  It's pouring down from the ceiling. Oswald's first thought was that perhaps by opening those sluices we had flooded some secret passage which communicated with the top of a moat-house, but when he was properly awake he saw that this could not be, on account of the river being so low. He had matches. He is, as I said before, a boy full of resources. He struck one and lit a candle. And Dicky, for it was indeed he, gazed with Oswald at the amazing spectacle. Our bedroom floor was all wet in patches. Dicky's bed stood in a pond, and from the ceiling water was dripping in rich profusion at a dozen different places. There was a great wet patch in the ceiling, and that was blue instead of white like the dry part, and the water dripped from different parts of it. In a moment Oswald was quite unmanned. Crikey! he said in a heart-broken tone, and remained in an instant plunged in thought. What on earth are we to do? Dicky said. And really, for a short time even Oswald did not know. It was a blood-curdling event, a regular faser. Albert's uncle had gone to London that day to stay till the next, yet something must be done. The first thing was to rouse the unconscious others from their deep sleep, because the water was beginning to drip on their beds, and though as yet they knew it not, there was quite a pool on Noel's bed just in the hollow behind where his knees were doubled up, and one of H.O.'s boots was full of water that surged wildly out when Oswald happened to kick it over. We woke them. A difficult task, but we did not shrink from it.  There's a flood! Wake up, or you will be drowned in your beds! And it's half past two by Oswald's watch. They awoke slowly, and very stupidly. H.O. was the slowest and stupidest. The water poured faster and faster from the ceiling. We looked at each other, and turned pale, and Noel said, Haven't we better call Mrs. Pettigrew? But Oswald simply couldn't consent to this. He could not get rid of the feeling that this was our fault somehow for meddling with the river, though of course the clear star of reason told him it could not possibly be the case. We all devoted ourselves, heart and soul to the work before us. We put the bath under the worst and wettest place, and the jugs and basins under lesser streams, and we moved the beds away to the dry end of the room. Ours is a long attic that runs right across the house. But the water kept coming in worse and worse. Our night-shirts were wet through, so we got into our shirts and nickel-bockers, but preserved bernice on our feet, and the floor kept on being half an inch deep in water, however much we mopped it up. We emptied the basins out of the window as fast as they filled, and we bailed the bath through the jug without pausing to complain how hard the work was. All the same it was more exciting than you can think. But in Oswald's dauntless breast he began to see that they would have to call Mrs. Pettigrew. A new waterfall broke out between the fire grate and the mantelpiece, and spread in devastating floods. Oswald is full of ingenious devices. I think I have said this before, but it is quite true, and perhaps even truer this time than it was last time I said it. He got a board out of the box-room next door, and rested one end in the chink between the fireplace and the mantelpiece, and laid the other end on the back of a chair. Then we stuffed the rest of the chink with our night-gowns, and laid a towel along the plank, and behold, a noble stream poured over the end of the board right into the bath we put there ready. It was like Niagara, only not so round in shape. The first lot of water that came down the chimney was very dirty. The wind whistled outside. Nole said, if its pipes burst and not the rain, it will be nice for the water-rates. Perhaps it was only natural after this for Denny to begin with his everlasting poetry. He stopped mopping up the water to say, By this the storm grew louder pace, the water-rates were shrieking, and in the howl of heaven each face grew black as they were speaking. Our faces were black, and our hands too, but we did not take any notice. We only told him not to gas, but to go on mopping, and he did, and we all did, but more and more water came pouring down. You could not believe so much could come off one roof. When at last it was agreed that Mrs. Pettigrew must be awakened at all hazards, we went and woke Alice to do the fatal errand. When she came back with Mrs. Pettigrew in a nightcap and red flannel petticoat, we held our breath. But Mrs. Pettigrew did not even say, What on earth have you children been up to now, as Oswald had feared. She simply sat down on my bed and said, Oh dear, oh dear, oh dear. Dear, ever so many times. Then Denny said, I once saw holes in a cottage roof. The man told me it was done when the water came through the thatch. He said, if the water lies all about on top of the ceiling, it breaks it down. But if you make holes, the water will only come through the holes, and you can put pails under the holes to catch it. So we made nine holes in the ceiling with the poker, and put pails, baths and tubs under. And now there was not so much water on the floor. But we had to keep on working like niggers, and Mrs. Pettigrew and Alice worked the same. About five in the morning the rain stopped. And about seven the water did not come in so fast, and presently it only dripped slowly. Our task was done. This is the only time I was ever up all night. I wish it happened oftener. We did not go back to bed then, but dressed and went down. We all went to sleep in the afternoon though, quite without meaning to. Oswood went up on the roof before breakfast, to see if he could find the hole where the rain had come in. He did not find any hole. But he found the cricket-ball, jammed in the top of a gutter-pipe which he afterwards knew ran down inside the wall of the house and ran into the mode below. It seemed a silly dodge, but it was so. When the men went up after breakfast to see what had caused the flood, they said there must have been a good half-foot of water on the leads the night before, for it to have risen high enough to go over the edge of the lead. Of course, when it got above the lead, there was nothing to stop it running down under it and soaking through the ceiling. The parapet and the roofs kept it from tumbling off down the sides of the house in the natural way. They said there must have been some obstruction in the pipe which ran down into the house. But whatever it was, the water had washed it away, for they put wires down and the pipe was quite clear. While we were being told this, Oswald's trembling fingers felt at the wet cricket-ball in his pocket. And he knew. But he could not tell. He heard them wondering what the obstruction could have been, and all the time he had the obstruction in his pocket and never said a single word. I do not seek to defend him, but it really was an awful thing to have been the cause of. And Mrs. Pettigrew is but harsh and hasty. But this, as Oswald knows too well, is no excuse for his silent conduct. That night at tea, Albert's uncle was rather silent too.  You know there was an angling competition. The pen was kept full on purpose. Some mischievous busybody went and opened the sluices and let all the water out. The angler's holiday was spoiled. No, the rain wouldn't have spoiled it anyhow, Alice. Anglers like rain. The Rose and Crown dinner was half of it wasted because the anglers were so furious that a lot of them took the next train to town. And this is the worst of all. A barge that was on the mud in the pen below was lifted and jammed across the river, and the water tilted her over, and her cargo is on the river bottom. It was coals. During this speech there were four of us who knew not where to turn our agitated glances. Some of us tried bread and butter, but it seemed dry and difficult. And those who tried tea choked and spluttered and were sorry they had not let it alone. When the speech stopped Alice said, It was us. And with deepest feelings she and the rest of us told all about it. Oswald did not say much. He was turning the obstruction round and round in his pocket, and wishing with all his sentiments that he had owned up like a man when Albert's uncle asked him before tea to tell him all about what had happened during the night. When they had told all, Albert's uncle told us for still more plainly and exactly what we had done, and how much pleasure we had spoiled, and how much of my father's money we had wasted, because he would have to pay for the coals being got up from the bottom of the river, if they could be, and if not, for the price of the coals. And we saw it all. And when he had done, Alice burst out crying over her plate and said, It's no use. We have tried to be good since we've been down here. You don't know how we've tried, and it's all no use. I believe we are the wickedest children in the whole world, and I wish we were all dead. This was a dreadful thing to say. And, of course, the rest of us were all very shocked, but Oswood could not help looking at Albert's uncle to see how he would take it. He said very gravely, My dear kiddie, you ought to be sorry, and I wish you to be sorry for what you've done. And you will be punished for it. We were. Our pocket money was stopped, and we were forbidden to go near the river, besides in positions miles long. But, he went on, you mustn't give up trying to be good. You are extremely naughty and tiresome, as you know very well. Alice, Dickie, and Noel began to cry at about this time. But you are not the wickedest children in the world by any means. Then he stood up and straightened his collar and put his hands in his pockets. You're very unhappy now, he said, and you deserve to be, but I will say one thing to you. Then he said a thing which Oswood, at least, will never forget, though but little he deserved it, with the obstruction in his pocket, unowned up to all the time. He said, I have known you all for four years, and you know as well as I do how many scrapes I've seen you in and out of. But I've never known one of you tell a lie. And I've never known one of you do a mean or dishonourable action. And when you have done wrong you are always sorry. Now this is something to stand firm on. You'll learn to be good in the other ways some day. He took his hands out of his pockets, and his face looked different so that three of the four guilty creatures knew he was no longer adamant. And they threw himself into his arms. Dora, Denny, Daisy, and Ajo, of course, were not in it, and I think they thanked their stars. Oswald did not embrace Albert's uncle. He stood there and made up his mind he would go for a soldier. He gave the wet ball one last squeeze, and took his hand out of his pocket, and said a few words before going to enlist, he said, The others may deserve what you say, I hope they do, I'm sure. But I don't, because it was my rotten cricket ball that stopped up the pipe and caused the midnight flood in our bedroom, and I knew it quite early this morning, and I didn't own up. Oswald stood there covered with shame, and he could feel the hateful cricket ball heavy and cold against the top of his leg through the pocket. Albert's uncle said, and his voice made Oswald hot all over, but not with shame. He said, I shall not tell you what he said, it's no one's business but Oswald's, only I will own, it made Oswald not quite so anxious to run away for a soldier as he had been before. That owning up was the hardest thing I ever did. They did put it in the Book of Golden Deeds, though it was not a kind or generous act, and did no good to anyone or anything except Oswald's own inside feelings. I must say I think they might have let it alone, Oswald would rather forget it, especially as Dicky wrote it in and put this. Oswald acted a lie which he knows is as bad as telling one, but he owned up when he needn't have, and this condones his sin, we think he was a thorough brick to do it. Alice scratched this out afterwards and wrote the record of the incident in more flattering terms, but Dicky had used Father's Ink and she used Mrs. Pettigrew's so anyone can read his underneath the scratching outs. The others were awfully friendly to Oswald to show they agreed with Albert's uncle in thinking I deserved as much share as anyone in any praise there might be going.  I let Noel have the ball. It had been thoroughly soaked, but it dried all right, but it could never be the same to me after what it had done and what I had done. I hope you will try to agree with Albert's uncle and not think foul scorn of Oswald because of this story. Perhaps you have done things nearly as bad yourself sometimes. If you have, you will know how owning up soothes the savage breast and alleviates the gnawings of remorse. If you have never done naughty acts, I expect it is only because you never had the sense to think of anything.


Hi everybody, I'm Sean Goggins. I'm representing the risk working group of the chaos project here at the Linux Foundation. And title of the talk is, it's a complex web of open source software dependencies and risks. And I'm going to open up by explaining that we're a metrics group. I'll tell you a little bit about that in a minute. But when we went down the road of trying to understand software dependencies, we found ourselves here. Does anyone remember or recognize where this is? The library of tar pits. A massive, complex web of things that are interconnected. And we had to mull through a lot of information, because there are a lot of different organizations and components of organizations that have some issue or concern with dependency security and things like that. So the questions that people who run open source project offices or open source projects themselves are, is my project secure enough, safe enough? How do I measure the dependencies? And this has become a very significant concern recently, because my projects are increasingly dependent on other projects. And the biggest thing we looked at is, can I use something that's unsafe or less than a secure component and have a secure result? In other words, how do I build a trustworthy machine without having trustworthy results from all the components? And as my application goes to being in the 90% in some cases of third party dependencies, what is it that I have control over? And then how I design all that so that a mistake isn't the end of the world. And then where KAS comes in is measuring it. So KAS is a project that launched at the 2017 Open Source Summit, which was somewhere here on the West Coast, I believe. I don't remember which city, maybe San Francisco, maybe Seattle, I don't know. LA, it was in LA. And so KAS, we came along, and our role is to really define metrics for open source software health and sustainability, and provide tools that help open source project organizations, OSPOs, individual projects, ecosystems, with ways to track the various components of sustainability within their projects. So questions like, how can we know if this open source project is going to be around in 10 years? Or what is the health of the other projects that this project depends on? Is there a diverse community? And our main aims are these boxes at the bottom, establishing implementation agnostic metrics for measuring community activity, contributions in health, and some integrated software for analyzing such things. And although it sounds very simple, at the very beginning of the project, we had a lot of discussion about what is a commit. How do you measure a commit? Does white space count? Do you commits that are compressed count? How do we account for those things? So we don't offer what we would say is the right definition of any given metric, but we offer a consistent one. So if it's consistently not your definition, in a way that's OK, because it's still consistent. We have a large group of organizations that work with us in a very open community. Our process is transparent. Our website, ChaosCatCommunity welcomes you with open arms. And again, we have both metrics and software that are integrated into the Chaos project. This is an eye chart, which you won't be able to read, but this is just an array of the different metrics that we've deployed. And they revolve around core working groups of evolution, common, which are the metrics that cross all of the other working groups, value, diversity, equity, inclusion, and risk, which is what we're talking about today. And we also have some initiatives, including community reports, badging, and some software. So Chaos is a very large enterprise at this point. And when we start to talk about the metrics that we have, risk, we have a lot of risk metrics, and dependency is one of them. I will get to that, I promise. Every metric, in some way, represents some square on this risk matrix that many of you have seen. In other words, what's the likelihood of something going wrong, and what's the effect on my project if something goes wrong? This is how we assess risk, just like I'm sure you do. And one of the things we do is we combine metrics. So one metric doesn't necessarily tell a story. So if we want to understand something like all the second-time contributors that you've got, how well are you doing at retaining new contributors, we have reports that group metrics together and give you beautiful little charts, like this and like this. But let's get to dependencies, because that's what we're here to talk about. And by the way, if you have a question, don't feel shy about shouting it out. Well, I'm up here. I'm happy to just answer your questions as they occur. So when we entered the dependency realm, this XKCD example is a really good one. All modern digital infrastructure and then some random project in Nebraska that somebody's been maintaining holds the whole thing up. I'm sure you've all, who has not seen this cartoon? Yeah, it's a very popular cartoon in open source. And when we waited into risk a little bit further, we realized that we weren't dealing with just one thing. When we're dealing with dependencies, there's a lot of different dimensions. There are licensing risks, safety critical system risks, dependency risks, open source, repositories, consumers, security, sustainability, compliance. When we look at risk, there's this whole universe. And then when we narrow it down into dependencies, you'll find that there are a lot of organizations software and efforts focused on this. There's OWASP, OSSF, DEPS.dev, Libvirs, National Vulnerabilities Database, the open source census. So as a working group, we were overwhelmed with the amount of work that was already being done in the risk dependency space. And some of it's overlapping. Some of it's orthogonal. Some of it's interconnected. But those connections were something that we took a great deal of time to try to figure out. And so what I want to talk to you about today is how we're going about within the chaos project of figuring out the measurement of these dependency risks with an open source software. And the way that we're doing it and how it's systematic, answering these questions. Is my project secure, safe? Can I measure the dependencies at all? How do I do that? Can I use these unsafe parts and still have a safe project? How do I design so that a mistake isn't the end of the world? How do I measure my dependencies so I can enable more rapid updates? So we get to the dependency question. And what are the indicators of a dependency risk? Every piece of software has a dependency. What constitutes that dependency having some risk to my project? And how can we quantify them in a meaningful way? Metrics. And what are the results of those measurements? Does it matter if we look at them over time? In other words, is there a trajectory of our dependency risk? Does it go up and down? Is it something that we want to monitor over time? And then what is the value of any particular dependency measurement? And so to try to put some concrete thing in your mind, let me pick one metric that we've developed formally. So how many of you have heard of the libier metric for dependencies before ever? Sophia in the back, who helped define the metric. Hi, Sophia. So NK asked to define metrics. We use this goal question metric methodology. And so what is the goal? In our case, it was understanding the scope of dependencies in open source projects and then identifying higher risk dependencies. We can't inventory and analyze the thousands of dependencies that some projects have. But what we can do is find indicators or heuristic metrics that help us identify those that are higher risk. And so this is our risk focus area. And so one question was that this libier metric answers is, what is the age of the project's dependencies compared to the current stable releases? And we had some discussion about stable release versus latest release. Because as you know, those are not always the same thing. And so we chose the language, stable release. This is an eye chart. You can have these slides afterwards. But the question is, what is the age of the project's dependencies compared to the current release? And so age of dependencies that the project relies on compared to those stable releases, and age for the libier metric, how do you come up with a number? It's cumulative across all the dependencies. There are other ways to do this. We could apply something like a mean or an average and possibly a median. So the math that you use depends on how you want to evaluate it and what makes sense inside of your organizational context. But the libier is an example of a dependency risk metric that gives you a general idea. If you're looking at 11,000 projects in your ecosystem or your OSPO that you're responsible for, it gives you a general idea. Which ones have the oldest dependencies compared to the most current stable release? I'm going to pause. I've thrown a lot at you. Does anybody have any questions at this point? Yeah? Let me answer. I will address that. It's a really important question. We haven't looked at data-oriented dependencies specifically. No. So I have some opinions about that based on some other work I've done. And we can maybe talk about that after. So the age of a project's dependencies, this is one example from a website that calculates libiers for Python. And it'll tell you the current version, the latest version, and how many libiers behind it is. So you can see it by dependency. And the objective of this specific metric is to help you identify the dependencies that have a higher probability of posing some risk or vulnerability. So the heuristic is, the older the dependency is, the more likely that specific dependency in a project is to pose a risk to the project. So it's a place to start. If you have a lot of dependencies, you can look dependency by dependency within a project. So right now the scope of our thinking is just within a project. And you can see which ones are the most out of date and do some assessment of whether or not those are ones that you want to make some effort to either update or contribute to depending on your project's perspective. And when we look at dependencies, risks, and vulnerabilities together, right now we have certain things that are part of a critical infrastructure that are consumed, tested. We have security, licensing, production. All of these things are involved people with tribal knowledge of the software, historical knowledge, domain expertise. Many different people are involved in making decisions about what dependencies to introduce and how to update them. There is a question of cost, and there's a question of project maintainability, test coverage, suitability for service, and then provenance, for example. So sometimes there's export-resist restrictions. There's certain countries that we can't take things from. And there's different kinds of dependencies as well. So direct dependency is the whole thing is ultimately transitive. But a direct dependency is I have my open source project, and these are the libraries I import directly. And then I have libraries that those libraries depend on, and then libraries that those libraries depend on. So ultimately, I can also have a library that depends on the same library that I depend on. So we have a matrix of very complicated dependencies. And so for a libier, what we do is for each of these primary dependencies, first we'll calculate how old they are, and we'll produce this cumulative metric of libier, the age of all of them for a project. And you can either calculate libier for the direct dependencies, or you can include the transitive dependencies. That's in the metric that we define. We left that open to the implementation to decide what to do about that. There's an alternative view of libier that comes out of some ospos where they want to understand the cumulative age of all dependencies between the current date and the date of the most recent release. So it's a slightly different metric. And when we add securities and vulnerabilities into it, then we can identify certain library dependencies as having some kind of security or vulnerability problem. And so that separate from the libier might flag it. Now the view from the Ospo kind of gets to the question that you asked earlier, which is, OK, I have thousands of projects that I have in my portfolio. And those projects have dependencies. And so now I have this giant ecosystem where I have the same dependency across many different projects. And I have a limited amount of money that I can invest in hardening dependencies that I don't want to go away. I want to substantially secure those communities. And so from an Ospo perspective, the picture that a lot of Ospo managers that we've talked to want to have is, OK, I've got 11,000 projects in my portfolio. I want to know across all those projects, where are my greatest vulnerabilities? Where's my greatest risk? I can't think about every single one of those 11,000 projects. I have to understand across the whole world, where am I going to invest money in a project that I'm dependent on in order to bring it either up to more currency or to move my software to a more recent release? And so what we've done as a working group, as we looked at that La Brea tar pit of dependencies and all of the people thinking about dependencies and vulnerabilities is, we really, thanks to the group of people working together in this group, identified some things that we think are what we call the minimum viable metric. And I'll credit Sophia Vargas back there for inventing the term minimum viable metric. And so the ones that we think for dependencies that are going to add the most value to people who want to understand where the risk lies in their dependency chain are just to list what my dependencies are. So one of our metrics, we've produced two metrics in this area so far. The other is upstream dependencies. And just enumerate them. Give me a list of all the things that my projects depend on. And then assessment of sustainability risk. So sustainability risk essentially will take that inventory and apply existing chaos metrics from evolution, common, and value into what we're starting to call a metrics model, and say, OK, these are all the things I'm dependent on based on the health and sustainability metric collection within chaos, which projects have the most health and sustainability concerns, let's say. And then dependency range. So this is going back to the ecosystem. How many times is a single dependency referenced in an ecosystem or an OSPO? Lib years, we've developed so it could be a total or an average, that's a filter that you can apply. And also enumerating known vulnerabilities for your project's upstream dependencies, which I think I actually have that twice. And also enabling, there's a tool called OSSF scorecard, which evaluates 10 different dependency criterias. We've actually implemented that in some of our chaos tools now. And how many people have heard of OSSF scorecard? Kate has heard of it? Anyone else? Sophia? So it's a scorecard for evaluating risk, and it has 10 characteristics, which I don't know what they are, but perhaps somebody, Kate, you know what they're? No, OK. But it's a useful assessment of different risk characteristics for a project that the OSSF put together. And then finally, a matrix between vulnerabilities and dependencies. So there's a vulnerabilities database that is available. And if we understand the list of our dependencies and we can cross-reference them with a vulnerabilities database, and these databases are imperfect and now more decentralized, though somewhat more well-funded than they have been historically, we can start to, these minimum viable metrics, we think, help to give open source a standard way of thinking about dependency risk. And since it's a hard problem with a lot of different pieces to it and a lot of folks working on it, what we're trying to do with our work is cohere a set of definitions for things that we can focus on. So instead of being overwhelmed as we were as a group at first by the number of different perspectives on this problem, what we're doing with these metric definitions is giving us a place to focus. We've talked about and thought about all of the different work that's happening in the dependency space right now. And we've said, OK, if we measure these things, we're going to give most organizations, most projects, most ecosystems, a much clearer view, if not a perfectly clear view of what their dependency risk condition is right now. Coming back to chaos, I just want to talk about, so we have two metrics we've defined about eight minimum viable metrics. And our history is, at first in 2016 or 17, we didn't have common shared metrics. Every organization trying to measure something in open source software was doing it their own way. And at this point, we have over 50 defined metrics. When our next release comes out, it'll be over 75. And now with things like risk metrics and dependency metrics, we're trying to look at health and sustainability metrics, making them widely available and providing tools and projects that can look across ecosystems. And activity metrics with a repository focus can give us a really good idea about scale, project culture, project quality, process quality, product quality. We can contextualize risk, identify licensing risk, and look at corporatization and access to resources as factors that affect dependencies and the introduction of them. So now I want to come back and ask you these questions. These are the questions that we had as we sorted through this tar pit of available resources. Which of these questions are most salient to you? Are any of them salient to you? So is my project secure enough? And how to design so that a mistake is not the end of the world? Good? Yeah? Or three? So how do I measure the dependencies because of my projects increasingly have them? And yeah, so it comes back to the likelihood of occurrence and the effect, the impact of the occurrence. So if a dependency allows for a large date of reach, it might have been a little likelihood, but it had a high impact. So some of how you make these decisions are going to be related to the kind of systems that you're running. Safety critical systems have a near zero tolerance for any dependency risk. And it has to be measured not only at coding time, but at runtime as well, which is an entirely separate discussion. What are some ways that you think about dependencies and avoiding risks that come from them, aside from analyzing each individual dependency? Are there defensive coding strategies or release processes that you have in place that provide some protection in addition to understanding the dependencies in depth? Yeah. One of the things that we're doing with our tools is providing a list of dependencies over time so that you, as an OSPO manager, for example, would be aware that new dependencies were injected into your code. And you could decide if that was appropriate. Other organizations have started to implement dependency approval boards, where if you want to introduce a new dependency, you have to get it approved by a manager first. There's a recognition that the old programming practices and languages like Python, to be fair, the Python C++ contrast I think is a fair one. It would be very common for a developer to add a library because it served some function that they needed and they didn't want to write it themselves or they didn't want to find if one of the libraries they're already using already include a similar piece of functionality. It's just easier to throw in the one you know. And I think a lot of corporate practices and or project practices are starting to limit those. And things like, you know, simply having metrics that enumerate your dependencies help you to understand if new ones are introduced. Yeah. So rating each, so this is where it becomes a full circle opportunity for a project like KS, where we're working to help measure the health and sustainability of open source software projects by knowing that a project has got a strong community behind it and a good core set of developers and maintainers and contributors. If you know that, then choosing to import that library probably poses a lower risk than randomly grabbing one off of PyPy, right? And so that's, you know, one of the things we're trying to accomplish with dependency metrics is to give you visibility into health and sustainability of not just the project you're working on but the things it's dependent on. And I think to your point, this can be a proactive thing where I want to use something that's already hardened. Where do I find it? How do I assess the hardness of it, the stability, the health and the sustainability of the community? This is where I say thank you and ask if there's any other questions or discussions that people have. I mean dependencies are a significant concern really across open source right now. And what the KS projects risk working group is trying to do is, you know, give you some metrics that you can use and some tools that you can use to evaluate those dependencies and assess the safety and stability of your projects so that if you're responsible for running, say, a gas pipeline, you can determine if you have a vulnerability that needs to be addressed. Kate, yes, you can go to chaos.community. Hopefully that's easy enough to remember. Chaos has two S's because we wanted to be just a little bit more chaotic than regular chaos. And if you go to chaos.community, there's a participate tab and we have working groups that meet every other week. We have a weekly community meeting on Tuesdays at 11 a.m. Central Daylight Time in the U.S. We have a lot of resources related to our metrics and tools available at our GitHub site, which is GitHub slash chaos, C-H-A-O-S-S. We haven't done that. David Wheeler has worked closely with us on the development of these risk metrics and he's very closely involved with the CVE database and security in general. I think he has a heuristic belief that there is a relationship or he wouldn't be working with us because he's a busy guy. We looked at it as a, so right now, the metrics for evaluating dependency risk are, they don't exist before we started to do this, at least in a formal and consistently defined manner. And when we looked at, there were three GitHub repositories that implemented a version of the Libya metric all a little bit differently. And we tried to develop a metric that would provide a fast heuristic indicator of where I should look first. So if I have a large collection of projects that I'm overseeing, Libya helps you to see where to look first. And you can slice the data at the dependency level or at the project level or at your ecosystem or OSPO level. And it's a place to start. It's a filter so that you don't have to look directly at the dependency chain in 11,000 projects. You can start with the thousand that have the most risk. It gives you, yeah. So it's helping with that focus when you have a large scale set of responsibility. I'll hang out here for as long as you like, but the rest of you are free to go, as I say to my classes.


Abby Lee Miller says she's in desperate need of plastic surgery. I'm just like devastated.  She's headed to Beverly Hills for help from plastic surgeon Dr. Saul Laha-Johnny. This whole, like, this is my problem, this back fat. But right here, this is where you're... Oh my God, yes, it's awful now. The doctor will remove fat from her bra line and also under her arms.  You can wear your shirts more comfortably. Abby was also hoping for a tummy tuck, but her doctors have decided to limit the procedures, so her tummy tuck will have to wait. On the day of surgery, Abby's doctor marks where he'll remove and tuck flat. All this extra skin will get pinched in here. I'm really worried. I'm nervous. She questions whether she should have the cosmetic surgery. Here I am doing something that's, like, very superficial and selfish. But this isn't just about vanity. She's lost over 100 pounds. She has a lot of excess skin. You know, excess skin is not only uncomfortable, but you can get infections. The surgery is on. The doctor performs lipo and removes lots of skin. Length-wise is probably maybe around 16 inches. Width-wise, maybe around 3 inches. Four hours later, Abby emerges with her arms tightly wrapped to reduce swelling. We check back seven weeks later, and Abby loves her new shape. This is a shirt that fits now. It was hanging in my closet forever. She's still swollen, but already sees big improvement. This isn't really hugging me tight. It's kind of loose. Can you see that? Look at the dramatic difference before and after surgery. The hanging skin is gone. So is the fat along her bra line.