I do development on openbmc (https://github.com/openbmc/openbmc) which is an open source bmc implantation using bitbake, primarily targeted to aspeed, and nuvoton bmc chips.
Recent BMC firmwares have openbmc under the hood, with the industry using it as a base for further development or customisation.
Is there a modular standard for BMCs?
- runbmc (https://www.opencompute.org/documents/ocp-runbmc-daughterboard-card-design-specification-v1-4-1-pdf)
- DC-SCM https://www.opencompute.org/documents/ocp-dc-scm-spec-rev-1-0-pdf
I have only glanced the surface of these specs.BMC security is what keeps me up at night. Firmware software quality is low, and often not up to date. I think openbmc does a good job in both respects.