1. Spdx-Tech
  2. Messages

Expanded

Topics Messages Polls
   Date   
Event: SPDX tech team meeting - Tuesday, May 30, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: SPDX tech team meeting

When:
Tuesday, May 30, 2023
11:00am to 12:30pm
(UTC-05:00) America/Chicago

Where:
https://zoom.us/j/663426859

Organizer: Kate Stewart kstewart@...

View Event

Description:
https://zoom.us/j/663426859
Meeting ID: 663 426 859

Tuesdays at 17:00 UTC (and best guess for local time - 10:00AM PDT, 11:00 MDT, 12:00PM CDT, 1:00PM EDT, 18:00 WAT, 19:00 CEST).
Australia +61 2 8015 2088
Canada +1 647 558 0588
Germany +49 30 3080 6188
Japan +81 3 4578 1488
US Toll-free 877 369 0926
Find your local number: https://zoom.us/u/ac9KKJWzJT

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=MjhvMjJvOGd2cXAxNjk3bzA4bDYzYTk2cjQgc3BkeC10ZWNoQGxpc3RzLnNwZHgub3Jn&tok=Mjgja3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZzZmNjFiY2RkMThiNDZlMzg1ZjY5OTFhMjM3NGJhMGFiNjg4ZDdlMjU&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Re: Next tech team meeting - discuss licensing profile

Steve Winslow
 

Hello all,

For the discussion of the SPDX 3.0 draft Licensing profile later today, the primary focus will be discussing Alexios’s proposed reworking of the Licensing profile structure and classes at https://github.com/spdx/spdx-3-model/pull/297. I expect much of the conversation during the call will focus on this draft PR and issues related to it.

If we have additional time following that part of the discussion, here are a few related issues that we can cover:

  • LicenseID type and formatting (closely related to Alexios’s draft PR): #205, #339
  • License fields as Relationships rather than Properties (also related to the draft rework PR): #254
  • Handling NONE and NOASSERTION for licenses and copyright text: #204, #207, #289, also relates to #71 and #76 and #211 and also #224 for good measure

Note that the focus here will be more on “technical” issues, e.g. the structuring of classes and properties. We’ll look to schedule a follow-up joint call to discuss more “substantive” issues such as whether particular new fields should be added, as well as the recent change proposal relating to the DataLicense options.

Looking forward to talking today. Best,
Steve


On May 25, 2023, at 12:27 PM, Steve Winslow via lists.spdx.org <swinslow=gmail.com@...> wrote:

Hello SPDX Legal and Tech teams,

Next Tuesday, during the Tech team’s regularly scheduled call at noon Eastern US time, we’ll be starting out with a discussion of the SPDX 3.0 Licensing profile and some of the pending issues: https://github.com/spdx/spdx-3-model/issues?q=is%3Aopen+is%3Aissue+label%3AProfile%3ALicensing

Between now and then, if possible I’ll aim to put together and circulate a list of the key open issues that we'll focus on during the call.

I’m hoping that folks from the Legal team will be able to join and participate in the discussion, along with the Tech team participants that have been driving the 3.0 spec discussion and drafting forward. Meeting info is available at https://github.com/spdx/meetings#tech-team-meetings.

Thank you!
Steve

Re: GSoC '23 Proposal: SoftWare Heritage SPDX generation

Gary O'Neall
 

Hi Harsh,

 

You proposal looks very interesting and I’m sure it will provide a lot of benefit to the SWHID and SPDX communities.

 

Since you are using the Python libraries, you can get early access to the SPDX 3.0 features using the prototype-spdx-3.0 branch.  There will likely be further changes to the SPDX 3.0 spec before final release, but the python library is kept relatively current.

 

Feel free to ask any question on this email list.  You can also use the SPDX Gitter channel: https://app.gitter.im/#/room/#spdx-org_Lobby:gitter.im

 

Thanks,
Gary

 

 

From: Spdx-tech@... <Spdx-tech@...> On Behalf Of Kate Stewart
Sent: Friday, May 26, 2023 6:52 AM
To: HarshVardhan Mahawar <hv062727@...>
Cc: spdx-tech@...; spdx-legal@...
Subject: Re: [spdx-tech] GSoC '23 Proposal: SoftWare Heritage SPDX generation

 

Hi Harsh,

    Delighted to have you working on this project!  

 

Happy to set up some time and provide some orientation about SPDX specification evolution, and

starting points to work with.  

 

Can you please send me (1:1) some time windows (with local time) next week on Tuesday or Wednesday that work for you and I'll set up a meeting.  I'm based in the US.

 

Thanks!

Kate

 

On Fri, May 26, 2023 at 8:41 AM HarshVardhan Mahawar <hv062727@...> wrote:

Dear SPDX community,


I hope this email finds you well, My name is Harsh Vardhan Mahawar and I am delighted to have been selected as a GSoC contributor during this summer with the SPDX organization.
First of all I would like to thank the SPDX community and my mentor David Douard from SWH for giving me this opportunity to work on this project "SoftWare Heritage SPDX generation"
This project involves generation of valid SPDX documents through SWHID (SoftWare Heritage persistent IDentifiers) using currently available spdx-python libraries.
I am attaching my GSoC proposal to this email for your reference. 
After discussing with my mentor I am planning to use SWH Graphql public api to retrieve necessary information about and around a particular SWHID.
Now, I would like to address a few queries and seek clarifications regarding the project:
1.Could you please provide me more details about the specific SPDX specifications and formats (as 3.0 is in its way :)) that I should focus on during the document generation process.
2.Are there any specific documentation resources or references that you recommend for this project.

I appreciate your guidance and support throughout (and after as well :)) the GSoC program, and I am eager to collaborate with the project mentors and the SPDX community to successfully complete this project.

Thank you for your time and consideration. I am excited to embark on this journey in the Open-source world.

Best regards,

Harsh Vardhan Mahawar

Re: GSoC '23 Proposal: SoftWare Heritage SPDX generation

Kate Stewart
 

Hi Harsh,
    Delighted to have you working on this project!  

Happy to set up some time and provide some orientation about SPDX specification evolution, and
starting points to work with.  

Can you please send me (1:1) some time windows (with local time) next week on Tuesday or Wednesday that work for you and I'll set up a meeting.  I'm based in the US.

Thanks!
Kate

On Fri, May 26, 2023 at 8:41 AM HarshVardhan Mahawar <hv062727@...> wrote:
Dear SPDX community,

I hope this email finds you well, My name is Harsh Vardhan Mahawar and I am delighted to have been selected as a GSoC contributor during this summer with the SPDX organization.
First of all I would like to thank the SPDX community and my mentor David Douard from SWH for giving me this opportunity to work on this project "SoftWare Heritage SPDX generation"
This project involves generation of valid SPDX documents through SWHID (SoftWare Heritage persistent IDentifiers) using currently available spdx-python libraries.
I am attaching my GSoC proposal to this email for your reference. 
After discussing with my mentor I am planning to use SWH Graphql public api to retrieve necessary information about and around a particular SWHID.
Now, I would like to address a few queries and seek clarifications regarding the project:
1.Could you please provide me more details about the specific SPDX specifications and formats (as 3.0 is in its way :)) that I should focus on during the document generation process.
2.Are there any specific documentation resources or references that you recommend for this project.

I appreciate your guidance and support throughout (and after as well :)) the GSoC program, and I am eager to collaborate with the project mentors and the SPDX community to successfully complete this project.

Thank you for your time and consideration. I am excited to embark on this journey in the Open-source world.

Best regards,
Harsh Vardhan Mahawar

GSoC '23 Proposal: SoftWare Heritage SPDX generation

HarshVardhan Mahawar
 

Dear SPDX community,

I hope this email finds you well, My name is Harsh Vardhan Mahawar and I am delighted to have been selected as a GSoC contributor during this summer with the SPDX organization.
First of all I would like to thank the SPDX community and my mentor David Douard from SWH for giving me this opportunity to work on this project "SoftWare Heritage SPDX generation"
This project involves generation of valid SPDX documents through SWHID (SoftWare Heritage persistent IDentifiers) using currently available spdx-python libraries.
I am attaching my GSoC proposal to this email for your reference. 
After discussing with my mentor I am planning to use SWH Graphql public api to retrieve necessary information about and around a particular SWHID.
Now, I would like to address a few queries and seek clarifications regarding the project:
1.Could you please provide me more details about the specific SPDX specifications and formats (as 3.0 is in its way :)) that I should focus on during the document generation process.
2.Are there any specific documentation resources or references that you recommend for this project.

I appreciate your guidance and support throughout (and after as well :)) the GSoC program, and I am eager to collaborate with the project mentors and the SPDX community to successfully complete this project.

Thank you for your time and consideration. I am excited to embark on this journey in the Open-source world.

Best regards,
Harsh Vardhan Mahawar

PDF
proposal4.pdf

Next tech team meeting - discuss licensing profile

Steve Winslow
 

Hello SPDX Legal and Tech teams,

Next Tuesday, during the Tech team’s regularly scheduled call at noon Eastern US time, we’ll be starting out with a discussion of the SPDX 3.0 Licensing profile and some of the pending issues: https://github.com/spdx/spdx-3-model/issues?q=is%3Aopen+is%3Aissue+label%3AProfile%3ALicensing

Between now and then, if possible I’ll aim to put together and circulate a list of the key open issues that we'll focus on during the call.

I’m hoping that folks from the Legal team will be able to join and participate in the discussion, along with the Tech team participants that have been driving the 3.0 spec discussion and drafting forward. Meeting info is available at https://github.com/spdx/meetings#tech-team-meetings.

Thank you!
Steve

FW: [sw.assurance] AGENDA ATTACHED - Software and Supply Chain Assurance Forum Meeting- May 31/June 1, 2023

Dick Brooks
 

FYI, This looks to be a very influential and knowledgeable gathering of experts by NIST and may result in real progress on SBOM adoption within the Federal Government for OMB M-22-18 and the National Cybersecurity Strategy implementation.

Encouraging step.

Glad to see Microsoft participating on SBOM.

 

 

Thanks,

 

Dick Brooks

 

Active Member of the CISA Critical Manufacturing Sector,

Sector Coordinating Council – A Public-Private Partnership

 

Never trust software, always verify and report! ™

http://www.reliableenergyanalytics.com

Email: dick@...

Tel: +1 978-696-1788

 

 

From: 'Angela Smith' via sw.assurance <sw.assurance@...>
Sent: Wednesday, May 24, 2023 4:52 PM
To: sw.assurance <sw.assurance@...>
Subject: [sw.assurance] AGENDA ATTACHED - Software and Supply Chain Assurance Forum Meeting- May 31/June 1, 2023

 

We have a great line-up of topics and speakers for this Forum meeting.   Looking forward to seeing you there! 

 

 Draft agenda, attached 

 

On Monday, May 8, 2023 at 5:02:13 PM UTC-4 Angela Smith wrote:

Please register here:   https://na.eventscloud.com/SSCAmeetings2023/

 

Agenda is still being finalized but planned topics include: 

 

- SBOM:  multiple presentations/talks from industry and government covering both the production and consumption of SBOMs and the SBOM lifecycle

- Draft Secure Software Self-Attestation Form

- Overview of the proposed EU Cyber Resilience Act 

- CMMC Update

- MITRE System of Trust Update

and more! 

  

 

---------- Forwarded message ---------

From: Angela Smith <angela.smith@...>
Date: Monday, May 1, 2023 at 1:50:58 PM UTC-4
Subject: SAVE THE DATE: Software and Supply Chain Assurance Forum Meeting- May 31/June 1, 2023
To: sw.assurance <sw.assurance@...>

 

We are excited to share news about our upcoming in-person Software & Supply Chain Assurance (SSCA) Forum meeting!

Tell your friends, please mark your calendars, and join us on Wednesday, May 31st and Thursday, June 1st  at MITRE's McLean Campus.   The SSCA operates under Chatham House rules, there is no cost to participate, and the event is open to the public.  

We'll be sending out an update soon with a registration link and additional info about the agenda. 

Also -  we are always open to receiving suggestions for topics and do our best to find the right focus to discuss recommended topics. We hold these meetings for the community so don't be shy - - we want to hear from you about what you want to  know more about or want to discuss with our community.  We typically keep a running list of recommendations and do our best to work them in at some point.  

About the SSCA Meetings: Cyber risk has become a topic of core strategic concern for business and government leaders worldwide and is an essential component of an enterprise risk management strategy. The Software and Supply Chain Assurance (SSCA) Forum provides a venue for government, industry, and academic participants from around the world to share their knowledge and expertise regarding software and supply chain risks, effective practices and mitigation strategies, tools and technologies, and any gaps related to the people, processes, or technologies involved.

The effort is currently co-led by the National Institute of Standards and Technology (NIST), the Department of Homeland Security (DHS), and the Department of Defense (DoD. Participants represent a diverse group of career professionals including government officials, chief information security officers, those in academia with cybersecurity and supply chain specialties, system administrators, engineers, consultants, vendors, software developers, managers, analysts, specialists in IT and cybersecurity, and many more fields.

Additional information about the SSCA Forum, including past meetings, can be found at http://csrc.nist.gov/scrm/ssca/

 

We hope you can join us!

--
To unsubscribe from this group, send email to sw.assurance+unsubscribe@...
View this message at https://list.nist.gov/sw.assurance
---
To unsubscribe from this group and stop receiving emails from it, send an email to sw.assurance+unsubscribe@....

?
Spring 2023 draft agenda as of May24v2.docx

Information-based serialization

David Kemp
 

At this week's tech meeting, Jeff Schutt expressed the desire of many developers for a simple  JSON serialization.

I submitted PR #353 to add information modeling, which can define simple (non LD) JSON and simple (non RDF) XML serializations, to the serialization folder, for consideration by the serialization and canonicalization subteams.

Formal NIST Guidance on vulnerability disclosure reports to the Federal Government have been published

Dick Brooks
 

Hopefully this clears up the confusion over VEX and its role. VDR is how to report software product vulnerabilities to the Federal Government.

 

NIST SP 800-216 Federal Vulnerability May 2023 Disclosure Guidelines

i

Abstract

Receiving reports on suspected security vulnerabilities in information systems is one of the best ways for developers and services to become aware of issues. Formalizing actions to accept, assess, and manage vulnerability disclosure reports can help reduce known security vulnerabilities. This document recommends guidance for establishing a federal vulnerability disclosure framework, properly handling vulnerability reports, and communicating the mitigation and/or remediation of vulnerabilities. The framework allows for local resolution support while providing federal oversight and should be applied to all software, hardware, and digital services under federal control.

 

https://csrc.nist.gov/publications/detail/sp/800-216/final

 

 

Thanks,

 

 

 

Dick Brooks

 

Active Member of the CISA Critical Manufacturing Sector,

Sector Coordinating Council – A Public-Private Partnership

 

Never trust software, always verify and report! ™

http://www.reliableenergyanalytics.com

Email: dick@...

Tel: +1 978-696-1788

 

 

Event: SPDX tech team meeting - Tuesday, May 23, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: SPDX tech team meeting

When:
Tuesday, May 23, 2023
11:00am to 12:30pm
(UTC-05:00) America/Chicago

Where:
https://zoom.us/j/663426859

Organizer: Kate Stewart kstewart@...

View Event

Description:
https://zoom.us/j/663426859
Meeting ID: 663 426 859

Tuesdays at 17:00 UTC (and best guess for local time - 10:00AM PDT, 11:00 MDT, 12:00PM CDT, 1:00PM EDT, 18:00 WAT, 19:00 CEST).
Australia +61 2 8015 2088
Canada +1 647 558 0588
Germany +49 30 3080 6188
Japan +81 3 4578 1488
US Toll-free 877 369 0926
Find your local number: https://zoom.us/u/ac9KKJWzJT

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=MjhvMjJvOGd2cXAxNjk3bzA4bDYzYTk2cjQgc3BkeC10ZWNoQGxpc3RzLnNwZHgub3Jn&tok=Mjgja3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZzZmNjFiY2RkMThiNDZlMzg1ZjY5OTFhMjM3NGJhMGFiNjg4ZDdlMjU&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

FYI: 6/14 SBOM-o-Rama info in the Federal Register

Dick Brooks
 

Hello Everyone,



This looks like a good opportunity to share info about the CISA ICT_SCRM
Task Force SMB publication from January 2023 that contains some SBOM and VDR
related use cases and software supply chain mitigations:

#supplychain #SCRMTaskForce.



https://www.federalregister.gov/documents/2023/05/22/2023-10825/2023-cisa-sb
om-a-rama





To download the ICT_SCRM Task Force SMB publication please visit
CISA.gov/sites/default/files/publications/Securing-SMB-Supply-Chains_Resourc
e-Handbook_508.pdf
<https://www.cisa.gov/sites/default/files/publications/Securing-SMB-Supply-C
hains_Resource-Handbook_508.pdf>



Thanks,



Dick Brooks



Active Member of the CISA Critical Manufacturing Sector,

Sector Coordinating Council - A Public-Private Partnership



<https://reliableenergyanalytics.com/products> Never trust software, always
verify and report! (tm)

<http://www.reliableenergyanalytics.com/>
http://www.reliableenergyanalytics.com

Email: <mailto:dick@...>
dick@...

Tel: +1 978-696-1788

?
winmail.dat

Failed to meet critical mass for a joint filing to CISA on the self-attestation form

Dick Brooks
 

Hello Everyone,

 

Thanks for those that responded to the call to file a joint comment to CISA for the self-attestation call for comments, but I’m sorry to say we did not reach a critical mass (10 participants) sufficient to justify the joint filing.

 

REA is planning to file comments independently, at this point.  

 

https://www.cisa.gov/news-events/alerts/2023/04/28/cisa-requests-comment-secure-software-self-attestation-form

 

Thanks very much to the few that did respond to this call for collaboration.

 

Thanks,

 

Dick Brooks

 

Active Member of the CISA Critical Manufacturing Sector,

Sector Coordinating Council – A Public-Private Partnership

 

Never trust software, always verify and report! ™

http://www.reliableenergyanalytics.com

Email: dick@...

Tel: +1 978-696-1788

 

 

Re: Request for Feedback on Proposal

J Lovejoy
 

Thanks Vedant!  We are very excited to have you participate in our community!

Vedant will be joining the SPDX-legal call on Thursday, May 25th to discuss his proposal, get to know us, and hear any other input about your experiences with using the SPDX Online License Submission Tool (we really need a better name...)

Thanks,
Jilayne

On 5/15/23 8:04 AM, Vedant Jolly wrote:

Hi everyone, I am Vedant Jolly

I hope this email finds you in good health and high spirits. I am writing this email to seek your valuable feedback and suggestions on a proposal that I have recently drafted.

I am glad to become one of the contributors to our great community this year, and I want to express my sincere gratitude to the community and my mentors!!

I have attached the proposal to this email for your review. The proposal outlines my ideas for the project that I am planning to undertake, and I would greatly appreciate your input on it. Your expertise and experience in this field would be incredibly helpful in improving the proposal and ensuring its success.

I would be grateful if you could take the time to review the attached proposal and share your thoughts with me. Please let me know if you have any questions or concerns, and I will be more than happy to discuss them with you.

Also, I would be very happy if someone have interest in keeping in touch with me during the next couple of months. I believe it will not only be helpful to you and me, but also be helpful to the entire community!

Regards,
Vedant Jolly

Re: Request for Feedback on Proposal

Phil Odence <phil.odence@...>
 

Great job on the proposal! Very complete and professional.

 

From: Spdx-legal@... <Spdx-legal@...> on behalf of Mary Hardy via lists.spdx.org <MARYHARDY=microsoft.com@...>
Date: Wednesday, May 17, 2023 at 10:27 AM
To: vedantjolly2001@... <vedantjolly2001@...>, spdx-tech@... <spdx-tech@...>, Spdx-legal@... <Spdx-legal@...>
Subject: Re: Request for Feedback on Proposal

Hi Vedant Jolly, I’m Mary from the SPDX legal work group. We are very happy to have you join us for the summer! If there is anything I can do to help ensure your success, please don’t hesitate to let me know. I don’t have

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

Do not click links or open attachments unless you recognize the sender and know the content is safe.

ZjQcmQRYFpfptBannerEnd

Hi Vedant Jolly, I’m Mary from the SPDX legal work group.

We are very happy to have you join us for the summer! If there is anything I can do to help ensure your success, please don’t hesitate to let me know.

 

I don’t have as much experience with the tool as some of my colleagues, but I think your proposal is excellent. All the improvements are needed and will be appreciated. I am especially excited about the improved error handling and UI improvements, personally.

 

Looking forward to working with you.

 

Mary

 

Mary Hardy (CELA)

Senior Corporate Counsel

Open Source and Standards

Microsoft Corporation

(760) 390-4368

Book time with Mary Hardy (CELA)

 

 

 

From: Spdx-legal@... <Spdx-legal@...> On Behalf Of Vedant Jolly via lists.spdx.org
Sent: Monday, May 15, 2023 7:05 AM
To: spdx-tech@...; spdx-legal@...
Subject: [EXTERNAL] Request for Feedback on Proposal

 

Hi everyone, I am Vedant Jolly

I hope this email finds you in good health and high spirits. I am writing this email to seek your valuable feedback and suggestions on a proposal that I have recently drafted.

I am glad to become one of the contributors to our great community this year, and I want to express my sincere gratitude to the community and my mentors!!

I have attached the proposal to this email for your review. The proposal outlines my ideas for the project that I am planning to undertake, and I would greatly appreciate your input on it. Your expertise and experience in this field would be incredibly helpful in improving the proposal and ensuring its success.

I would be grateful if you could take the time to review the attached proposal and share your thoughts with me. Please let me know if you have any questions or concerns, and I will be more than happy to discuss them with you.

Also, I would be very happy if someone have interest in keeping in touch with me during the next couple of months. I believe it will not only be helpful to you and me, but also be helpful to the entire community!

Regards,
Vedant Jolly

Re: Request for Feedback on Proposal

Mary Hardy (CELA) <maryhardy@...>
 

Hi Vedant Jolly, I’m Mary from the SPDX legal work group.

We are very happy to have you join us for the summer! If there is anything I can do to help ensure your success, please don’t hesitate to let me know.

 

I don’t have as much experience with the tool as some of my colleagues, but I think your proposal is excellent. All the improvements are needed and will be appreciated. I am especially excited about the improved error handling and UI improvements, personally.

 

Looking forward to working with you.

 

Mary

 

Mary Hardy (CELA)

Senior Corporate Counsel

Open Source and Standards

Microsoft Corporation

(760) 390-4368

Book time with Mary Hardy (CELA)

 

 

 

From: Spdx-legal@... <Spdx-legal@...> On Behalf Of Vedant Jolly via lists.spdx.org
Sent: Monday, May 15, 2023 7:05 AM
To: spdx-tech@...; spdx-legal@...
Subject: [EXTERNAL] Request for Feedback on Proposal

 

Hi everyone, I am Vedant Jolly

I hope this email finds you in good health and high spirits. I am writing this email to seek your valuable feedback and suggestions on a proposal that I have recently drafted.

I am glad to become one of the contributors to our great community this year, and I want to express my sincere gratitude to the community and my mentors!!

I have attached the proposal to this email for your review. The proposal outlines my ideas for the project that I am planning to undertake, and I would greatly appreciate your input on it. Your expertise and experience in this field would be incredibly helpful in improving the proposal and ensuring its success.

I would be grateful if you could take the time to review the attached proposal and share your thoughts with me. Please let me know if you have any questions or concerns, and I will be more than happy to discuss them with you.

Also, I would be very happy if someone have interest in keeping in touch with me during the next couple of months. I believe it will not only be helpful to you and me, but also be helpful to the entire community!

Regards,
Vedant Jolly

Request for Feedback on Proposal

Vedant Jolly <vedantjolly2001@...>
 

Hi everyone, I am Vedant Jolly

I hope this email finds you in good health and high spirits. I am writing this email to seek your valuable feedback and suggestions on a proposal that I have recently drafted.

I am glad to become one of the contributors to our great community this year, and I want to express my sincere gratitude to the community and my mentors!!

I have attached the proposal to this email for your review. The proposal outlines my ideas for the project that I am planning to undertake, and I would greatly appreciate your input on it. Your expertise and experience in this field would be incredibly helpful in improving the proposal and ensuring its success.

I would be grateful if you could take the time to review the attached proposal and share your thoughts with me. Please let me know if you have any questions or concerns, and I will be more than happy to discuss them with you.

Also, I would be very happy if someone have interest in keeping in touch with me during the next couple of months. I believe it will not only be helpful to you and me, but also be helpful to the entire community!

Regards,
Vedant Jolly

PDF
GSoc Proposal 2023-BassCoder2808.pdf

Event: SPDX tech team meeting - Tuesday, May 16, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: SPDX tech team meeting

When:
Tuesday, May 16, 2023
11:00am to 12:30pm
(UTC-05:00) America/Chicago

Where:
https://zoom.us/j/663426859

Organizer: Kate Stewart kstewart@...

View Event

Description:
https://zoom.us/j/663426859
Meeting ID: 663 426 859

Tuesdays at 17:00 UTC (and best guess for local time - 10:00AM PDT, 11:00 MDT, 12:00PM CDT, 1:00PM EDT, 18:00 WAT, 19:00 CEST).
Australia +61 2 8015 2088
Canada +1 647 558 0588
Germany +49 30 3080 6188
Japan +81 3 4578 1488
US Toll-free 877 369 0926
Find your local number: https://zoom.us/u/ac9KKJWzJT

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=MjhvMjJvOGd2cXAxNjk3bzA4bDYzYTk2cjQgc3BkeC10ZWNoQGxpc3RzLnNwZHgub3Jn&tok=Mjgja3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZzZmNjFiY2RkMThiNDZlMzg1ZjY5OTFhMjM3NGJhMGFiNjg4ZDdlMjU&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Event: SPDX tech team meeting - Tuesday, May 9, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: SPDX tech team meeting

When:
Tuesday, May 9, 2023
11:00am to 12:30pm
(UTC-05:00) America/Chicago

Where:
https://zoom.us/j/663426859

Organizer: Kate Stewart kstewart@...

View Event

Description:
https://zoom.us/j/663426859
Meeting ID: 663 426 859

Tuesdays at 17:00 UTC (and best guess for local time - 10:00AM PDT, 11:00 MDT, 12:00PM CDT, 1:00PM EDT, 18:00 WAT, 19:00 CEST).
Australia +61 2 8015 2088
Canada +1 647 558 0588
Germany +49 30 3080 6188
Japan +81 3 4578 1488
US Toll-free 877 369 0926
Find your local number: https://zoom.us/u/ac9KKJWzJT

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=MjhvMjJvOGd2cXAxNjk3bzA4bDYzYTk2cjQgc3BkeC10ZWNoQGxpc3RzLnNwZHgub3Jn&tok=Mjgja3N0ZXdhcnRAbGludXhmb3VuZGF0aW9uLm9yZzZmNjFiY2RkMThiNDZlMzg1ZjY5OTFhMjM3NGJhMGFiNjg4ZDdlMjU&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Re: special call on JSON serialization

meret.behrens@...
 

Hi all,

we updated the example according to the new changes in the spdx-3-model and the comments in the meeting. You can find the updated example here: https://gist.github.com/meretp/561e4ea963122f5811a147ea056e4d84

 

Best
Meret 

Tomorow's tech call cancelled

Gary O'Neall
 

We will be skipping this week’s SPDX tech call due to a number of participants attending the SPDX Tooling Mini Summit in Vancouver.

 

All are welcome to sign-up and join virtually.

 

We’ll resume our normal schedule next Tuesday May 16.

 

Best,
Gary

1 - 20 of 5153