Re: Clarification on purpose and participation


Kim Weins twisted the bytes to say:

Kim> Their are several commercial tools that do this, but we also feel that open
Kim> source tools will be critical. Today there are a couple of OSS tools that
Kim> can help find and identify open source licenses. One is FOSSology (created
Kim> and maintained by HP) which is available at They are also
Kim> hosting it at OSU's Open Source Lab. Another is ninka (
Kim> which was created by Daniel German. I've
Kim> cc'd Daniel -- since you may want to talk to him about some of his
Kim> experience doing this. I don't believe FOSSology or Ninka will generate an
Kim> SPDX file (yet). We also have some free OSS tools on the site that
Kim> can help you convert a software bill of materials from spreadsheet form into
Kim> SPDX format. However that assumes you already have the info about what open
Kim> source licenses are included.

I wrote some scripts that will actually do a decent job of generating an
SPDX document. The only (challenge|problem) is that Ninka does not recognized
many of the SPDX licenses. here is an example, using Linux as the Guinea pig:

Notice that this is not a true SPDX compliant document:

- It is licensed under the Creative Commons.
- It has some extra tags that I find useful.
- It does not contain a verification code.


Daniel M. German
dmg (at) uvic (dot) ca
replace (at) with @ and (dot) with .

Join to automatically receive all group messages.