Re: SPDX Feb General Meeting Minutes

Kate Stewart

Hi Phil,
    I've gone in and updated the tech section to put links into some of the 
items we discussed and added details of Asia SPDX tech call.    
Please let me know if you want me to revert.

Tech Team Report - Kate/Gary[edit]

  • Tools
    • Applying to participate in GSoC for 2019
    • tools-golang
      • Steve Winslow has contributed new Go libraries to SPDX to support generating SPDX documents see:
      • He also created a tool to scan the kernel looking for SPDXIDs that Kate used for her talk at LCA to get latest status of the Kernel.
      • Go Steve!
  • Specification
    • Discussing Mark Atwood's Idea for alternative name spaces for companies licenses that are not open source.
      • Spec can handle via "LicenseRef-"
      • What guidance do we provide?
    • Unblocking contributions to 2.2
      • Kate is working with Thomas to unblock contributions to 2.2 (switch master over to 2.2 from 2.1.1)
      • We will be starting to take pull requests into 2.2 spec, for features approved, please assign issue to yourself if you want to write up the feature.
      • Focus for next few months
  • Started a tech call in Asia friendly time
    • Call will be on 2nd Tuesday of each month 10am Japan/12pm Australia (and 5pm PST Monday) on
    • First topic will be SPDX-lite discussion that's started in the OpenChain workgroup.

Thanks, Kate

On Thu, Feb 7, 2019 at 11:02 AM Phil Odence <phil.odence@...> wrote:


For techies, interesting discussion of custom license name space proposal. I hope my non-techie notes capture the essence.




General Meeting/Minutes/2019-02-07

< General Meeting‎ | Minutes

·         Attendance: 10

·         Lead by Phil Odence

·         Minutes of Jan meeting approved 




·         1 Tech Team Report - Kate/Gary

·         2 Legal Team Report - Jilayne

·         3 Outreach Team Report - Jack

·         4 Cross Functions

·         5 Attendees

Tech Team Report - Kate/Gary[edit]

·         Tools

·         SoC in again

·         Variety of proposals on Wiki

·         We’ll hear back end of Feb

·         Steve W 

·         created a tool to scan the kernel looking for SPDX

·         Contributed Go libraries

·         Go Steve

·         Specification

·         Discussing Marks Idea for alternative name spaces

·         Spec can handle

·         What guidance do we provide?

·         Starting to take pull requests into 2.2 spec

·         Focus for next few months

·         Started a tech call in Asia friendly 

Legal Team Report - Jilayne[edit]

·         License List

·         New process and links posted

·         Published policy says advocates need to stay engaged or requests may drop off the radar

·         GitHub process seems like a great way to handle requests

·         Need work outside the call 


Outreach Team Report - Jack[edit]

·         LinuxCon Aussie Presentation

·         Included Stat1/3 of files in Kernel have SPDX in them

·         Great momentum

·         Panel at FOSDEM on OSS Compliance tooling

·         Alexios attended

·         Lots or proposals on tools, so organizers turned into a panel w/ Bradley K moderating

·         Theme was need for interoperatblity

·         Video will be published

·         Alexios also mentioned that at recent copyleft conference, SPDX came up in every talk

·         Website

·         Looking into status of move to Wordpress with LF

·         Request a new license page has been directed to GitHub repo

·         Need an Outreach reboot

Cross Functions[edit]

·         Alternate name space

·         Basics

·         Many companies have source available non-OSS licenses

·         Would be good for companies to be able to have standard local names

·         Proposal is to use DNS

·         Addresses issues with flat, first come first served

·         DNS will be around for a long time

·         Allows companies to self-assign

·         Internationalized by default

·         Immediately readable

·         Leading dot clearly differentiates from SPDX standard names

·         Challenges

·         Doesn’t cary text

·         Companies’ names may change through M&A and may lose domains in the process

·         How to ensure that a company doesn’t change license text 

·         Sentiment is in favor of

·         Retain “License Ref” prefix

·         Standardize on place to log license data

·         In a one-license SPDX doc

·         Mark will mock up with one of the Amazon licenses, collaborating with Kate



·         Phil Odence, Black Duck/Synopsys

·         Kate Stewart, Linux Foundation

·         Mark Atwood, Amazon

·         Jilayne Lovejoy

·         Gary O’Neall, SourceAuditor

·         Dennis Clark, NexB

·         Alexios Zavras, Intel

·         Jack Manbeck, TI

·         Mark Baushke, Juniper

·         David Ryan


Join { to automatically receive all group messages.