|
Using SPDX for Python packages license documentation
Philippe Ombredanne
Dear Special People Doing eXceptional things:
FYI, I have been working with the Python community to specify how Python package distributions can use SPDX license expressions for their Core metadata. The draft of this spec (called a PEP for Python Enhancement Proposal) is at: https://www.python.org/dev/peps/pep-0639/ Comments and feedback are welcomed at: https://discuss.python.org/t/2154 -- Cordially Philippe Ombredanne +1 650 799 0949 | pombredanne@... DejaCode - What's in your code?! - http://www.dejacode.com AboutCode - Open source for open source - https://www.aboutcode.org nexB Inc. - http://www.nexb.com |
|
|
|
|
|
SPDX Sept Gen Meeting Minutes
Phil Odence
Thanks to Paul for hosting in my absence. https://wiki.spdx.org/view/General_Meeting/Minutes/2020-09-03
Best, Phil
L. Philip Odence General Manager, Black Duck Audit Business Synopsys Software Integrity Group, Burlington, MA M (781) 258-9502 | phil.odence@... https://www.synopsys.com/audits
|
|
|
|
|
|
Today's SPDX General Meeting Reminder - Special Presentation
Phil Odence
I have a conflict, so Paul will run the show today. Normal agenda, so it should not go the full hour.
Funding SPDX Tool Hosting…$800 to go to our goal: Thanks to a number of contributions we’ve blown past our phase 1 goal to fund this year and are well on our way to phase 2 to fund next year. You can still contribute: https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124
GENERAL MEETING
Meeting Time: Thurs, Sept 3, 8am PT / 10 am CT / 11am ET / 15:00 UTC. http://www.timeanddate.com/worldclock/converter.html
New dial in number: 415-881-1586 No PIN needed
The weblink for screenshare will stay the same at:
Administrative Agenda Attendance Minutes Approval
Technical Team Report – Kate/Gary
Legal Team Report – Jilayne/Paul/Steve
Outreach Team Report – Jack
Any Cross Functional Issues –All
|
|
|
|
|
|
Re: Confirming General Meeting datetime and connection info
VM (Vicky) Brasseur
Check! Many thanks to you & Mike for the quick responses. My calendar is finally correct on this matter. :)
toggle quoted message
Show quoted text
--V Steve Winslow wrote on 10/8/20 11:54: Hi VM, that's correct, for the time being the General meeting has continued to use UberConference for their monthly calls. |
|
|
|
|
|
Re: Confirming General Meeting datetime and connection info
Steve Winslow
Hi VM, that's correct, for the time being the General meeting has continued to use UberConference for their monthly calls. Best, Steve On Mon, Aug 10, 2020 at 2:43 PM VM (Vicky) Brasseur <spdx@...> wrote: According to the wiki page, the General Meeting call is the first |
|
|
|
|
|
Re: Confirming General Meeting datetime and connection info
|
|
|
|
|
|
Confirming General Meeting datetime and connection info
VM (Vicky) Brasseur
According to the wiki page, the General Meeting call is the first Thursday of the month and meets on Uberconference: https://wiki.spdx.org/view/General_Meeting
Is this still correct, or is there (for instance) a Zoom link to use instead? --V |
|
|
|
|
|
SPDX Aug General Meeting Minutes
Phil Odence
https://wiki.spdx.org/view/General_Meeting/Minutes/2020-08-06
General Meeting/Minutes/2020-08-06< General Meeting | Minutes · Attendance: 14 · Lead by Phil Odence · Minutes of Aug meeting Contents[hide] · 1 Presentation - GSoC Smith Tanjong Agbor · 2 Tech Team Report - Kate / Gary · 3 Legal Team Report - Paul/Steve Presentation - GSoC Smith Tanjong Agbor[edit]· Validating License Cross References Tech Team Report - Kate / Gary[edit]· Spec · 2.1 is in good shape · Ready to submit to ISO · Many big thanks to Steve, Jack, Rex and others for great work · Should be an ISO Spec in 4-5 months · Also looking at 3.0 for ISO · Tools · Community Bridge funding project · We are through phase 1 (funding for this year) · On track for phase 2 next year · Should have new infrastructure up in the next month or two · Including real URL · and SSL for security · GSoC · All projects are progressing quite well · All students have passed 2nd evaluation · Aveek started this for SPDX (in addition to LF) and it’s been great for us · We get more slots as a consequence Legal Team Report - Paul/Steve[edit]· License List · Monday we relapsed 3.10 license list · 20 new ones · Joint meeting upcoming with the tech team to look at 3.0 Outreach Team Report[edit]· No Update Cross Functional[edit]·
Attendees[edit]· Phil Odence, Black Duck/Synopsys · David Wheeler, Linux Foundation · Mark Baushke, Juniper · Kate Stewart, Linux Foundation · Gary O’Neall, SourceAuditor · Paul Madick · Michael Herzog- nexB · Steve Winslow, LF · Michael Herzog- nexB · Matije Suklje, Liferay · Aveek, NextMark Printers · Alexios Zavras, Intel · Michael Richardson · Mike Dolan, Linux Foundation
|
|
|
|
|
|
Today's SPDX General Meeting Reminder - Special Presentation
Phil Odence
Special Presentation by Tanjong Agbor Smith, one of our Google Summer of Code students
Here’s how Tanjong describes himself and his work: I am Tanjong Agbor smith, enrolled in a Masters degree in Computing Science at the University of Alberta. This is my second GSOC contribution for spdx; my first was last year(GSOC 2019) with the License List namespaces project which was a success. I shall be talking about a Google summer of code project titled "Validate license list cross references". This project emanates from a github issue raised, and seeks to provide more information on the validity of urls listed in license files.
Funding SPDX Tool Hosting: I’ll also mention that thanks to a number of contributions we’ve blown past our phase 1 goal to fund this year and are well on our way to phase 2 to fund next year. You can still contribute: https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124
GENERAL MEETING
Meeting Time: Thurs, Aug 6, 8am PT / 10 am CT / 11am ET / 15:00 UTC. http://www.timeanddate.com/worldclock/converter.html
New dial in number: 415-881-1586 No PIN needed
The weblink for screenshare will stay the same at:
Administrative Agenda Attendance Minutes Approval
Presentation
Technical Team Report – Kate/Gary
Legal Team Report – Jilayne/Paul/Steve
Outreach Team Report – Jack
Any Cross Functional Issues –All
|
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
It would be great. How about Third Monday August at 5pm Pacific? We can do one to two slots on CommunityBridge stuff, each up to 15 minutes + questions.
toggle quoted message
Show quoted text
Can you help pull it together? I would love to showcase the practical stuff happening. Shane On Aug 6, 2020, at 2:18, Gary O'Neall <gary@...> wrote: |
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Gary O'Neall
Hi Shane,
There are a couple of community bridge related topics we could cover.
For the SPDX online tools, I’m planning on presenting to the OpenChain tools workgroup in Sept.
We could also present as part of a webinar.
Another interesting topic would be the work the interns and GSoC students are doing for the tools more generally.
We have a number of mentors and students involved – perhaps some of the mentors would be interested in jointly presenting?
Gary
From: spdx@... <spdx@...> On Behalf Of Shane Coughlan
Sent: Wednesday, August 5, 2020 4:57 AM To: spdx@... Cc: phil.odence@...; Kate Stewart <kstewart@...> Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools
Speaking of which, would someone be willing to do 10~15 minutes on ComminityBridge for a forthcoming OpenChain webinar?
Shane
|
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Gary O'Neall
I actually tried to implement this in a serverless environment (it was my first choice), but there is persistent state required for some of the components. As Alexios points out – a good future project.
The PostgreSQL is necessary as a DB backend. It also uses Redis – but this doesn’t seem to add too much complexity. We have some projects underway to reduce the dependency on Java – it would be great to make this all python sometime in the future.
BTW – Anyone interested in reviewing and contributing can review the issues listed here: https://github.com/spdx/spdx-online-tools/issues/199
Gary
From: spdx@... <spdx@...> On Behalf Of Alexios Zavras
Sent: Wednesday, August 5, 2020 4:27 AM To: spdx@... Cc: phil.odence@...; Kate Stewart <kstewart@...> Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools
Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉
-- zvr
From: spdx@... <spdx@...> On Behalf Of Vladimir Sitnikov
>The deployment is a bit complex (Java/Python/Django/PostgreSQL).
Is the complexity really needed? Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?
Vladimir
Intel Deutschland GmbH |
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Speaking of which, would someone be willing to do 10~15 minutes on ComminityBridge for a forthcoming OpenChain webinar? Shane On Aug 5, 2020, at 20:26, Alexios Zavras <alexios.zavras@...> wrote:
|
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Alexios Zavras
Rewriting this to a simpler setup is definitely a valid idea for a future Community Bridge / GSoC project. 😉
-- zvr
From: spdx@... <spdx@...> On Behalf Of
Vladimir Sitnikov
Sent: Wednesday, 5 August, 2020 10:37 To: spdx@... Cc: phil.odence@...; Kate Stewart <kstewart@...> Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools
>The deployment is a bit complex (Java/Python/Django/PostgreSQL).
Is the complexity really needed? Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend?
Vladimir
Intel Deutschland GmbH |
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Vladimir Sitnikov <sitnikov.vladimir@...>
>The deployment is a bit complex (Java/Python/Django/PostgreSQL). Is the complexity really needed? Can it be moved to a serverless solution? E.g. GitHub pages for the static content + lambdas for backend? Vladimir |
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Gary O'Neall
Hi Mark,
Yes – SPDX is using AWS for the hosting (see https://github.com/spdx/spdx-online-tools/issues/194 for a discussion on the hosting options).
The deployment is a bit complex (Java/Python/Django/PostgreSQL).
Any credits/help is appreciated.
I registered the account that is hosting the site – so feel free to contact me for additional details.
Gary
From: spdx@... <spdx@...> On Behalf Of Mark Atwood via lists.spdx.org
Sent: Monday, August 3, 2020 7:15 PM To: spdx@...; phil.odence@...; Kate Stewart <kstewart@...> Subject: Re: [spdx] Funding for Hosting On-Line SPDX Tools
Is SPDX using AWS for any hosting? I can probably get gratis AWS credits provided to SPDX.
And since SPDX is using Github, then Github pages can be used to host HTML/CSS/JS
..m
Mark Atwood <atwoodm@...> Principal, Open Source +1-206-604-2198
The SPDX Work Group needs your help to host on-line tools.
As you may know, SPDX runs on shoestring with support from the Linux Foundation but no corporate contributions. There are benefits to the independence this arrangement, but it means we rely on individual contributions to cover modest expenses we do take on. One of those regular expenses is for cloud services to host our wonderful set of on-line tools.
We spend $1200/year on hosting. We’d like to line up enough funding to backfill for this year and to build a balance of “money in the bank” to ensure continuity next year. So the goal is $2400 total. As of this writing we are approaching half way there.
Please make a contribution of any size through the Linux Foundation CommunityBridge at: https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124
BIG THANKS in advance!
Phil
L. Philip Odence General Manager, Black Duck Audit Business Synopsys Software Integrity Group, Burlington, MA M (781) 258-9502 | phil.odence@... https://www.synopsys.com/audits
|
|
|
|
|
|
Re: Funding for Hosting On-Line SPDX Tools
Is SPDX using AWS for any hosting? I can probably get gratis AWS credits provided to SPDX.
And since SPDX is using Github, then Github pages can be used to host HTML/CSS/JS
..m
Mark Atwood <atwoodm@...> Principal, Open Source +1-206-604-2198
From: spdx@... <spdx@...> On Behalf Of Phil Odence
Sent: Tuesday, July 28, 2020 11:18 AM To: spdx@... Subject: [EXTERNAL] [spdx] Funding for Hosting On-Line SPDX Tools
The SPDX Work Group needs your help to host on-line tools.
As you may know, SPDX runs on shoestring with support from the Linux Foundation but no corporate contributions. There are benefits to the independence this arrangement, but it means we rely on individual contributions to cover modest expenses we do take on. One of those regular expenses is for cloud services to host our wonderful set of on-line tools.
We spend $1200/year on hosting. We’d like to line up enough funding to backfill for this year and to build a balance of “money in the bank” to ensure continuity next year. So the goal is $2400 total. As of this writing we are approaching half way there.
Please make a contribution of any size through the Linux Foundation CommunityBridge at: https://funding.communitybridge.org/projects/f0e320d6-9c86-4656-ad4d-97842f25b124
BIG THANKS in advance!
Phil
L. Philip Odence General Manager, Black Duck Audit Business Synopsys Software Integrity Group, Burlington, MA M (781) 258-9502 | phil.odence@... https://www.synopsys.com/audits
|
|
|
|
|
|
Re: [openchain] [spdx] Funding for Hosting On-Line SPDX Tools
J Lovejoy
I just donated using a Visa and it worked.
toggle quoted message
Show quoted text
J.
|
|
|
|
|
|
Re: [openchain] [spdx] Funding for Hosting On-Line SPDX Tools
Phil Odence
Thank, Steve. And, McCoy, thanks in advance for the contribution! Best, Phil
L. Philip Odence General Manager, Black Duck Audit Business Synopsys Software Integrity Group, Burlington, MA M (781) 258-9502 | phil.odence@... https://www.synopsys.com/audits
From: <main@...> on behalf of Steve Winslow <swinslow@...>
Sorry to hear that, McCoy... I've reached out to the CommunityBridge maintainers to ask them to look into this and figure out what's going on. Will let you know what I hear back.
Best, Steve
On Fri, Jul 31, 2020 at 11:02 AM Shane Coughlan <scoughlan@...> wrote:
Steve Winslow |
|
|
|
|
|
Re: [openchain] [spdx] Funding for Hosting On-Line SPDX Tools
Steve Winslow
Sorry to hear that, McCoy... I've reached out to the CommunityBridge maintainers to ask them to look into this and figure out what's going on. Will let you know what I hear back. Best, Steve On Fri, Jul 31, 2020 at 11:02 AM Shane Coughlan <scoughlan@...> wrote:
|
|
|
|
