We are still trying to line up a presentation from one of the GSoC students who has not yet presented; that’s up in the air.

I will not be able to join so one of the other Core Team members will host.

Best regards,

Phil

GENERAL MEETING

Meeting Time: Thurs, Oct 3, 8am PT / 10 am CT / 11am ET / 15:00 UTC.  http://www.timeanddate.com/worldclock/converter.html

Conf call dial-in:

New dial in number: 415-881-1586

No PIN needed

The weblink for screenshare will stay the same at: 
http://uberconference.com/SPDXTeam

Administrative Agenda

Attendance

Minutes Approval:   https://wiki.spdx.org/view/General_Meeting/Minutes/2019-09-05

Possible GSoC Presentations

Technical Team Report – Kate/Gary

Legal Team Report – Jilayne/Paul

Outreach Team Report – Jack

Any Cross Functional Issues –All

Uberconference changed their platform; I’ve updated the link below.

Please accept this recurring meeting.

Thanks,

Phil

*****

I’m extending this recurring meeting to run through 2019. Please accept so it is updated on your calendar, however no need to send a response to me.

New dial in number: 415-881-1586

No PIN needed

The weblink for screenshare will stay the same at:
https://www.uberconference.com/room/spdxteam

MEETING MINUTES FOR REVIEW: http://spdx.org/wiki/meeting-minutes-and-decisions

< General Meeting‎ | Minutes

·         Attendance: 17

·         Lead by Phil Odence

·         Minutes of Aug meeting approved 

Contents

 [hide] 

·         1 Special Presentations - Hiro Fukuchi, Sony

·         2 Tech Team Report - Gary

·         3 Legal Team Report - Jilayne/Paul/Steve

·         4 Outreach Team Report - Jack

·         5 Cross Functional -

·         6 Attendees

·         SPDX- Lite

·         Open Chain Japan Work Group

·         Member companies- Toyota, Denso, Panasonic, Pioneer, Sony, Fujitsu, Olympus, Renesas

·         Common Problem- Can’t get OSS information from suppliers (HW vendors, ODMs, SOC, partners…in Asia (China/Taiwan) and Japan

·         They don’t have complete information

·         Don’t have the tools to generate and evaluate

·         SPDX Lite is part of guidelines

·         Fits in at a fairly high level of maturity

·         OpenChain - “Making Process”

·         SPDX (and OSS tooling) - “Improving Process”

·         Most suppliers are at low levels of maturity

·         Looking not to fork, but to expand usage of SPDX Lite

·         Lite Description

·         Subset of SPDX

·         Minimum requirement

·         Can be manually generated

·         Proved in actual business use

·         Scenarios

·         1 Unskilled suppliers

·         Useful at a lower level of maturity than SPDX requires

·         2 Non-engineering Staff

·         More understandable by Legal and Procurement staff.

·         Skilled suppliers would still use full SPDX

·         OpenChain compliant suppliers would be sophisticated enough

·         Question: Is SPDX Lite fully SPDX compliant

·         Yes, all mandatory fields are included in SPDX Lite plus some of the optional fields may be included.

·         Spec

·         Being worked in a GitHub repo

·         Set up for pull requests for 2.2

·         Anyone who has ideas or proposed changes, please submit as a pull request

·         One in place is SPDX Lite

·         Proposal is as an Appendix

·         Thought is a profile for a specific use case

·         Could be first of a number of profiles

·         Tools

·         Successful conclusion to GSoC

·         All passed

·         A number of new libraries including Python, Golang

·         Mentors and students were great

·         Record number of projects

·         Challenge now is integrating and putting into production

·         All legal team tools have been submitted as pull requests

·         Should be up and running in a month or so.

·         Legal Team License Submittal Demo (GSoC)

·         Video and minutes available

·         Need to update contribution instructions

·         Team call today

·         License List

·         3.7 release at end of month

·         Fewer licenses in release that some recents

·         Recent discussions have been more high level on principles than specific licenses

·         Survey

·         Has been out for a few months

·         37 responses so far

·         Will make one more pass

·         Looking at presenting at Gen Meeting in Nov

·         Philipe has been talking to the Python community about using SPDX License IDs and expressions in Python package manifest

·         Could be a model for other communities

·         …some of which have been using formally or informally

·         Potentially high leverage

·         RUST and Go are using sporadically

·         None

·         Phil Odence, Black Duck/Synopsys

·         Steve Winslow, LF

·         Gary O’Neall, SourceAuditor

·         Jack Manbeck, TI

·         Nicolas Toussaint, Orange

·         Mark Atwood, Amazon

·         Jilayne Lovejoy, Canonical

·         Hiro Fukuchi, Sony

·         Shinsuke Kato, Panasonic

·         Philippe Ombrédanne- nexB

·         Michael Herzog, NexB

·         Patrice-Emmanuel Schmitz, Trasys International, European Commission

·         Richard Fontana, Red Hat

·         Mark Baushke, Juniper

·         Paul Madick, Dimension Data

·         Nisha Kumar, VMWare

·         David Marr, Qualcomm

Hi all,

Thank you for the meeting.

I would like to send my slides.

“SPDX Lite”- Hiroyuki Fukuchi from Sony will present a proposal from the OpenChain Japan Workgroup on a slimmed down version of an SPDX doc. Big thanks to Fukuchi-san for joining us at this hour which is not very convenient for him.

We may also have another GSoC presentation; still working on that.

GENERAL MEETING

Meeting Time: Thurs, Sept 5, 8am PT / 10 am CT / 11am ET / 15:00 UTC.  http://www.timeanddate.com/worldclock/converter.html

Conf call dial-in:

New dial in number: 415-881-1586

No PIN needed

The weblink for screenshare will stay the same at: 
http://uberconference.com/SPDXTeam

Administrative Agenda

Attendance

Minutes Approval:   https://wiki.spdx.org/view/General_Meeting/Minutes/2019-08-01

GSoC Presentations

Technical Team Report – Kate/Gary

Legal Team Report – Jilayne/Paul

Outreach Team Report – Jack

Any Cross Functional Issues –All

Thank you, Phil-san.

Fukuchi-san,

This sounds like a great idea.

I will contact you about this.

Best regards,

Phil

Hi Phil-san and all,

My name is Hiro Fukuchi from Sony.

I am a member of the OpenChain project Japan workgroup.

Can I join the next uberconference and explain about the background of the “SPDX Lite” which is being proposed by Japan workgroup.

I am creating the slides for explanation.

---

Hiro Fukuchi (Hiroyuki.Fukuchi@...)

Sony