Re: SPDX recommendations from other communities! :-D


Kate Stewart
 



On Wed, Sep 6, 2017 at 7:51 AM, Neal Gompa <ngompa13@...> wrote:

I'd like to point out that this recommendation is contingent on being
able to automatically scan and generate it. No one is suggesting
manual inventory of code to generate SPDX document.

Hi Neal,
    We agree, some tooling is needed to generate the signing of the 
files that is needed in an SPDX document for an accurate manifest. 
Both FOSSology and ScanCode are open source projects that 
scan source projects and generate SPDX documents.   Windriver
also provides a service to do so too. 

Kate

Join spdx@lists.spdx.org to automatically receive all group messages.