Hi all, After examining availabilities and preferences, the serialization meetings of SPDX will move two hours later, on the same days. Therefore, they will happen on Thursdays, 1500-1600 UTC. Once a

Reminder: SPDX tech team meeting When: Tuesday, June 6, 2023 11:00am to 12:30pm (UTC-05:00) America/Chicago Where: https://zoom.us/j/663426859 Organizer: Kate Stewart kstewart@... View Event Descripti

Hi all, As you may already know, the group of people with interest in the serialization of SPDXv3 data meets regularly. The current schedule is weekly calls on Thursdays, 1300-1400 UTC. Are there peop

Reminder: SPDX tech team meeting When: Tuesday, May 30, 2023 11:00am to 12:30pm (UTC-05:00) America/Chicago Where: https://zoom.us/j/663426859 Organizer: Kate Stewart kstewart@... View Event Descripti

Hello SPDX Legal and Tech teams, Next Tuesday, during the Tech team’s regularly scheduled call at noon Eastern US time, we’ll be starting out with a discussion of the SPDX 3.0 Licensing profile and so

Dear SPDX community, I hope this email finds you well, My name is Harsh Vardhan Mahawar and I am delighted to have been selected as a GSoC contributor during this summer with the SPDX organization. Fi

FYI, This looks to be a very influential and knowledgeable gathering of experts by NIST and may result in real progress on SBOM adoption within the Federal Government for OMB M-22-18 and the National

At this week's tech meeting, Jeff Schutt expressed the desire of many developers for a simple JSON serialization. I submitted PR #353 to add information modeling, which can define simple (non LD) JSON

Hopefully this clears up the confusion over VEX and its role. VDR is how to report software product vulnerabilities to the Federal Government. NIST SP 800-216 Federal Vulnerability May 2023 Disclosure

Reminder: SPDX tech team meeting When: Tuesday, May 23, 2023 11:00am to 12:30pm (UTC-05:00) America/Chicago Where: https://zoom.us/j/663426859 Organizer: Kate Stewart kstewart@... View Event Descripti

Hello Everyone, This looks like a good opportunity to share info about the CISA ICT_SCRM Task Force SMB publication from January 2023 that contains some SBOM and VDR related use cases and software sup

Hello Everyone, Thanks for those that responded to the call to file a joint comment to CISA for the self-attestation call for comments, but I’m sorry to say we did not reach a critical mass (10 partic

Hi everyone, I am Vedant Jolly I hope this email finds you in good health and high spirits. I am writing this email to seek your valuable feedback and suggestions on a proposal that I have recently dr

Reminder: SPDX tech team meeting When: Tuesday, May 16, 2023 11:00am to 12:30pm (UTC-05:00) America/Chicago Where: https://zoom.us/j/663426859 Organizer: Kate Stewart kstewart@... View Event Descripti

Reminder: SPDX tech team meeting When: Tuesday, May 9, 2023 11:00am to 12:30pm (UTC-05:00) America/Chicago Where: https://zoom.us/j/663426859 Organizer: Kate Stewart kstewart@... View Event Descriptio

Hi all, We’re planning a special call on how to do the serialization in JSON, next Tuesday, the hour before the regularly scheduled tech call. Very briefly, the problem statement is that: We know how

We will be skipping this week’s SPDX tech call due to a number of participants attending the SPDX Tooling Mini Summit in Vancouver. All are welcome to sign-up and join virtually. We’ll resume our norm

Hi all, Given most of regular participants will be at the SPDX 3.0 workshop in Vancouver, or attending remotely, we're going to cancel tomorrow's meeting. SPDX 3.0-rc1 was tagged over the weekend as a

Greetings SPDX tech team, I just updated the SPDX 3 Migration Analysis to be consistent with the release candidate version of the spec. There were a lot of recent changes in the model, so it is quite

Reminder: SPDX tech team meeting When: Tuesday, May 2, 2023 11:00am to 12:30pm (UTC-05:00) America/Chicago Where: https://zoom.us/j/663426859 Organizer: Kate Stewart kstewart@... View Event Descriptio