Date   

Unsubscribe

Lori Holmes <lori@...>
 

 


TripleCheck 0.4

Nuno Brito
 

Dear SPDX group,

I'd like to announce the availability of a new SPDX editor/viewer.

Features:

- Create an SPDX document from:
-- a source code folder on disk
-- a zipped file on the network

- User interface:
-- Desktop UI
-- Access from a web browser

- Java based (tested under Windows and Linux)
- Tree navigation of files and folders
- Search features (name, hash, similar files)
- Basic SPDX editing features
- Metrics calculation (LOC, size, number of files)
- Basic license detection (detects GPL, LGPL, ...) headers in source code
- Learning function (supports plugins, new licenses, ...)

The tool is freeware, code is released under the open source EUPL.

These are the first editions, many defects are present that we'll be addressing in the upcoming months. If you have any requests or would like to report a defect, just write us back an email.


At the moment only the tag/value format is supported. On our context there wasn't much demand for supporting the XML version. An SPDX document generated by our tool writes more information that what the standard prescribes. For example, we include the hashes for other algorithms because they help us finding trails of specific files across the web.


This tool is useful if you need a quick way to visually generate an SPDX document from a set of files on your disk. We were already developing this kind of tools in the past for forensic analysis purposes, moved recently to embrace the SPDX format.


For more details and download, please visit http://www.triplecheck.de/download/


With kind regards,
Nuno Brito

--
email: nuno.brito@triplecheck.de
phone: +49 615 146 03187


CollabSummit rides

Philip Odence
 

This is a late thought, but perhaps helpful. I put up a “ride board” on the wiki for anyone who might have some room or need a ride to/from. 



Re: List of companies that have adopted SPDX

RUFFIN MICHEL
 

The customers of Alcatel-Lucent are mainly telecom operators. They just start in their RFP to ask questions on FOSS and ask list of FOSS in our products. They are far to ask things in SPDX format.

There are 2 things in SPDX the data and the XML format. So we provide the data but not under the XML format (note that we are able to provide it under XML since our tools are aligned and prepared for that).

Now if we were to exchange information with companies aligned on SPDX such as Blackduck, we will probably provide information under full SPDX format so we can automate things between our tools.

As I said XML is for tools, excel is for humans

Michel.Ruffin@Alcatel-Lucent.com, PhD
Software Coordination Manager, N&P IS/IT
Distinguished Member of Technical Staff
Tel +33 6 75 25 21 94
Alcatel-Lucent International, Centre de Villarceaux
Route De Villejust, 91620 Nozay, France

-----Message d'origine-----
De : Georgia Kapitsaki [mailto:gkapi@cs.ucy.ac.cy]
Envoyé : vendredi 14 mars 2014 10:52
À : RUFFIN, MICHEL (MICHEL)
Objet : Re: List of companies that have adopted SPDX

Hi Michael,

thank you for the answer.

If possible, can you add this information in the relevant spdx wiki page?

http://wiki.spdx.org/view/Business_Team/Adoption

Also may I ask you if you provide also externally any SPDX files coming from real projects? I understand that company policies may not allow this, but it would be very interesting for us to have access to some real-world cases, since we are trying to evaluate a tool that checks the correctness of SPDX files.

I remain at your disposal for any information.

Thank you.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


On 3/10/2014 4:47 PM, RUFFIN, MICHEL (MICHEL) wrote:
Well the status for Alcatel-Lucent is
1) we officially use the standard naming of FOSS license internally, but perhaps have not changed all our processes, documents and the knowhow of ALU people on this but our trainings, our FOSS internal DB are aligned. (And even me, I speak about BSD2 license or new BSD rather than BSD3-clause license)
2) our internal tools are able to exchange information under SPDX format (some still need to be aligned). Now people use more excel format than XML one when they discuss things 8-) So SPDX/XML is more for machines; Concerning our contracts with suppliers we are asking Excel format and mention SPDX format. It took years to convince them to provide us the list under something easy to treat by computers (Excel rather than ASCI files or url on their web site where we can find the information; We will go to the next step but smoothly

Michel
Michel.Ruffin@Alcatel-Lucent.com, PhD
Software Coordination Manager, N&P IS/IT
Distinguished Member of Technical Staff
Tel +33 6 75 25 21 94
Alcatel-Lucent International, Centre de Villarceaux
Route De Villejust, 91620 Nozay, France


-----Message d'origine-----
De : spdx-bounces@lists.spdx.org [mailto:spdx-bounces@lists.spdx.org] De la part de Philip Odence
Envoyé : lundi 10 mars 2014 13:36
À : Georgia Kapitsaki; spdx@lists.spdx.org
Objet : Re: List of companies that have adopted SPDX

All, if you are willing to add you organization's name to the list of those using SPDX, please either add to the adoption wiki page http://wiki.spdx.org/view/Business_Team/Adoption or drop a note to Jack and Mikael.

Georgia,

Thanks for the inquiry. First let me tell you we don¹t have perfect knowledge. We have gotten to the point that there is enough information available on the Website that one can utilize the spec without having to be involved or ask questions and we know that there are many companies working with SPDX, but either consciously or unconsciously are not sharing that info.

That said, about 6 months ago we started a wiki page to capture what we know, at least about companies that were willing to have their activity known. http://wiki.spdx.org/view/Business_Team/Adoption We know that the info was not complete at the time and surely it has fallen behind a bit.

Best,
Phil


On 3/10/14, 7:57 AM, "Georgia Kapitsaki" <gkapi@cs.ucy.ac.cy> wrote:

Dear all,

is there a location for information on companies that have adopted SPDX.
I was not able have access to this information (if available) from the
specification website.

Thank you.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx
_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


Re: SPDX "Online Validation Tools" and "Fossology+SPDX Tools"

Philip Odence
 

To keep the traffic down, we should move this discussion off of the general list. Thanks.

On Mar 10, 2014, at 7:12 PM, "Gary O'Neall" <gary@sourceauditor.com> wrote:

Hi Georgia,

The Online Validation Tools will likely be based on the SPDX libraries. The
source for these libraries can be found at
http://git.spdx.org/?p=spdx-tools.git;a=summary and the binary downloads can
be found at http://spdx.org/spdx-tools/tools-from-the-spdx-workgroup

The validation tools will be based on the SPDX specifications found at
http://spdx.org/SPDX-specifications/spdx-version-1.2.

Let me know if you have any additional questions.

Thanks,
Gary O'Neall



-----Original Message-----
From: spdx-bounces@lists.spdx.org [mailto:spdx-bounces@lists.spdx.org]
On Behalf Of Georgia Kapitsaki
Sent: Monday, March 10, 2014 4:45 AM
To: spdx@lists.spdx.org
Subject: SPDX "Online Validation Tools" and "Fossology+SPDX Tools"

Dear all,

as part of some research work we are performing between the University
of Cyprus (UCY) and the Otto-von-Guericke-Universität Magdeburg (OVGU)
we have some relevant activities to some projects indicated in:
http://www.linuxfoundation.org/collaborate/workgroups/gsoc/gsoc-2014-
spdx-projects

Specifically, we would like to contact:
- Gary O'Neall for the "Online Validation Tools"
- Matt Germonprez for the Fossology+SPDX Tools"

If there are any advancements in these projects, we would like to have
an answer on this in this post if possible.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx
_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


Re: SPDX "Online Validation Tools" and "Fossology+SPDX Tools"

Gary O'Neall
 

Hi Georgia,

The Online Validation Tools will likely be based on the SPDX libraries. The
source for these libraries can be found at
http://git.spdx.org/?p=spdx-tools.git;a=summary and the binary downloads can
be found at http://spdx.org/spdx-tools/tools-from-the-spdx-workgroup

The validation tools will be based on the SPDX specifications found at
http://spdx.org/SPDX-specifications/spdx-version-1.2.

Let me know if you have any additional questions.

Thanks,
Gary O'Neall

-----Original Message-----
From: spdx-bounces@lists.spdx.org [mailto:spdx-bounces@lists.spdx.org]
On Behalf Of Georgia Kapitsaki
Sent: Monday, March 10, 2014 4:45 AM
To: spdx@lists.spdx.org
Subject: SPDX "Online Validation Tools" and "Fossology+SPDX Tools"

Dear all,

as part of some research work we are performing between the University
of Cyprus (UCY) and the Otto-von-Guericke-Universität Magdeburg (OVGU)
we have some relevant activities to some projects indicated in:
http://www.linuxfoundation.org/collaborate/workgroups/gsoc/gsoc-2014-
spdx-projects

Specifically, we would like to contact:
- Gary O'Neall for the "Online Validation Tools"
- Matt Germonprez for the Fossology+SPDX Tools"

If there are any advancements in these projects, we would like to have
an answer on this in this post if possible.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


Re: SPDX "Online Validation Tools" and "Fossology+SPDX Tools"

Matt Germonprez <germonprez@...>
 

Hi Georgia,

Thanks for your interest. Here at the University of Nebraska at Omaha we maintain the code related to FOSSology+SPDX. You can find a public instance of the project here: 

You can find the current source and installation here: 

We have several things that we are considering regarding FOSSology+SPDX right now including: 

1) Interface redesign. Right now, the interface assumes detailed knowledge of the SPDX 1.2 spec. We would like to design an interface that not only produces valid SPDX documents but also educates a user about the current spec. 

2) Post-production of SPDX documents loaded to a central SPDX repository. Currently, SPDX documents are downloaded to the user on a one-by-one basis. The SPDX repository would serve as a central DB by which SPDX documents could then be explored, modified, signed-off, or assigned to products. 

3) Accommodation for the SPDX 2.0 Specification 

We are very open to new improvements or ideas and welcome your input. Please let me know if you have any additional questions. 

Regards,
Matt Germonprez 


On Mon, Mar 10, 2014 at 6:45 AM, Georgia Kapitsaki <gkapi@...> wrote:
Dear all,

as part of some research work we are performing between the University of Cyprus (UCY) and the Otto-von-Guericke-Universität Magdeburg (OVGU) we have some relevant activities to some projects indicated in:
http://www.linuxfoundation.org/collaborate/workgroups/gsoc/gsoc-2014-spdx-projects

Specifically, we would like to contact:
- Gary O'Neall for the "Online Validation Tools"
- Matt Germonprez for the Fossology+SPDX Tools"

If there are any advancements in these projects, we would like to have an answer on this in this post if possible.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@...
https://lists.spdx.org/mailman/listinfo/spdx



--
Mutual of Omaha Associate Professor of Information Systems
University of Nebraska at Omaha
Vita
Open Communities Lab


March General Meeting Minutes

Philip Odence
 

I thought it might be useful to include the text of the minutes in my monthly reports, so intend to start doing so. 

For the last 30 mins of the April General Meeting, the Tech Team will give a high level presentation of the 2.0 model on which we have converged, intended for anyone on any team who has not been involved in the details of  2.0. 



General Meeting/Minutes/2014-03-06

  • Attendance: 10
  • Minutes of Feb meeting approved
  • Lead by Phil Odence


Contents

Biz Team Report - Jack (unable to attend, but provided written summary)

  • Agenda is fixed for Linux Collab and posted on the SPDX web site. LF will publish as well.
  • Tech Report Framework is almost complete. Will be ready to go by Collab.
  • We have a new co-chair, Mikael Söderberg from Pelagicore
  • We are looking at documenting an SPDX ecosystem and generating vertical specific whitepapers on using SPDX.


Legal Team Report - Jilayne

  • Calendar Invite
    • Some issues with old ones; light attendance at last meeting as a consequence
    • Please delete. Everyone on the LT should have a new one from Mike Dolan.
  • Fedora List
    • Still pushing to get through by CollabSummit
    • Goal is to cover as much as possible of the Fedora "good list" on SPDX License List
    • Jilayne doing lots of work herself; appreciating any help.
  • CollabSummit- Focus for legal meeting with be on the expression language.


Tech Team Report - Gary

  • Two main threads of late:
    • Applying real examples to the 2.0 model
    • Working out how to upgrade Tag Value format to handle new model
      • Sorting through three proposals: Extending current approach, JSON, RDF
  • Model
    • There had been two models, one more evolutionary, one more revolutionary
    • Now focused on one based on the more evolutionary approach.
    • Tech team will present model at the next General Meeting, April 3


Cross Functional Issues – Phil

  • OSI Collaboration Update
    • We have had some interaction, but have not yet set up a joint meeting
  • 2.0 Language on SPDX.org
    • No feedback
    • Need to review post CollabSummit
  • License Expression Syntax - MarkG
    • One more meeting planned prior to CollabSummit
    • Aiming for draft and examples for face to face discussion
    • Hoping for closure at CollabSummit


Attendees

  • Phil Odence, Black Duck
  • Scott Sterling, Palamida
  • Pierre Lapointe, nexB
  • Kirsten Newcomer, Black Duck
  • Jilanyne Lovejoy, ARM
  • Mike Dolan, Linux Foundation
  • Mark Gisi, Wind River
  • Mary Hardy, Qualcomm
  • Gary O'Neill, Source Auditor
  • Tom Incorvia, MicroFocus 


Re: List of companies that have adopted SPDX

RUFFIN MICHEL
 

Well the status for Alcatel-Lucent is
1) we officially use the standard naming of FOSS license internally, but perhaps have not changed all our processes, documents and the knowhow of ALU people on this but our trainings, our FOSS internal DB are aligned. (And even me, I speak about BSD2 license or new BSD rather than BSD3-clause license)
2) our internal tools are able to exchange information under SPDX format (some still need to be aligned). Now people use more excel format than XML one when they discuss things 8-) So SPDX/XML is more for machines; Concerning our contracts with suppliers we are asking Excel format and mention SPDX format. It took years to convince them to provide us the list under something easy to treat by computers (Excel rather than ASCI files or url on their web site where we can find the information; We will go to the next step but smoothly

Michel
Michel.Ruffin@Alcatel-Lucent.com, PhD
Software Coordination Manager, N&P IS/IT
Distinguished Member of Technical Staff
Tel +33 6 75 25 21 94
Alcatel-Lucent International, Centre de Villarceaux
Route De Villejust, 91620 Nozay, France

-----Message d'origine-----
De : spdx-bounces@lists.spdx.org [mailto:spdx-bounces@lists.spdx.org] De la part de Philip Odence
Envoyé : lundi 10 mars 2014 13:36
À : Georgia Kapitsaki; spdx@lists.spdx.org
Objet : Re: List of companies that have adopted SPDX

All, if you are willing to add you organization's name to the list of those using SPDX, please either add to the adoption wiki page http://wiki.spdx.org/view/Business_Team/Adoption or drop a note to Jack and Mikael.

Georgia,

Thanks for the inquiry. First let me tell you we don¹t have perfect knowledge. We have gotten to the point that there is enough information available on the Website that one can utilize the spec without having to be involved or ask questions and we know that there are many companies working with SPDX, but either consciously or unconsciously are not sharing that info.

That said, about 6 months ago we started a wiki page to capture what we know, at least about companies that were willing to have their activity known. http://wiki.spdx.org/view/Business_Team/Adoption We know that the info was not complete at the time and surely it has fallen behind a bit.

Best,
Phil


On 3/10/14, 7:57 AM, "Georgia Kapitsaki" <gkapi@cs.ucy.ac.cy> wrote:

Dear all,

is there a location for information on companies that have adopted SPDX.
I was not able have access to this information (if available) from the
specification website.

Thank you.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx
_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


Re: List of companies that have adopted SPDX

Philip Odence
 

All, if you are willing to add you organization's name to the list of
those using SPDX, please either add to the adoption wiki page
http://wiki.spdx.org/view/Business_Team/Adoption or drop a note to Jack
and Mikael.

Georgia,

Thanks for the inquiry. First let me tell you we don¹t have perfect
knowledge. We have gotten to the point that there is enough information
available on the Website that one can utilize the spec without having to
be involved or ask questions and we know that there are many companies
working with SPDX, but either consciously or unconsciously are not sharing
that info.

That said, about 6 months ago we started a wiki page to capture what we
know, at least about companies that were willing to have their activity
known. http://wiki.spdx.org/view/Business_Team/Adoption We know that the
info was not complete at the time and surely it has fallen behind a bit.

Best,
Phil

On 3/10/14, 7:57 AM, "Georgia Kapitsaki" <gkapi@cs.ucy.ac.cy> wrote:

Dear all,

is there a location for information on companies that have adopted SPDX.
I was not able have access to this information (if available) from the
specification website.

Thank you.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


Re: List of companies that have adopted SPDX

Tom Incorvia
 

I recollect someone requesting this information as part of a prior press release.

There are both companies that support the standard, and a larger group of companies that have standardized on the license naming. Micro Focus utilizes the SPDX license list and relies on the SPDX names for all internal open source logging. Tom

Tom Incorvia; tom.incorvia@microfocus.com; O: (512) 340-1336; M: (215) 500 8838; Shoretel (Internal): X27015

-----Original Message-----
From: spdx-bounces@lists.spdx.org [mailto:spdx-bounces@lists.spdx.org] On Behalf Of Georgia Kapitsaki
Sent: Monday, March 10, 2014 6:57 AM
To: spdx@lists.spdx.org
Subject: List of companies that have adopted SPDX

Dear all,

is there a location for information on companies that have adopted SPDX.
I was not able have access to this information (if available) from the specification website.

Thank you.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


This message has been scanned for malware by Websense. www.websense.com


List of companies that have adopted SPDX

Georgia Kapitsaki
 

Dear all,

is there a location for information on companies that have adopted SPDX. I was not able have access to this information (if available) from the specification website.

Thank you.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


SPDX "Online Validation Tools" and "Fossology+SPDX Tools"

Georgia Kapitsaki
 

Dear all,

as part of some research work we are performing between the University of Cyprus (UCY) and the Otto-von-Guericke-Universität Magdeburg (OVGU) we have some relevant activities to some projects indicated in:
http://www.linuxfoundation.org/collaborate/workgroups/gsoc/gsoc-2014-spdx-projects

Specifically, we would like to contact:
- Gary O'Neall for the "Online Validation Tools"
- Matt Germonprez for the Fossology+SPDX Tools"

If there are any advancements in these projects, we would like to have an answer on this in this post if possible.

Best regards,
Georgia

--
Dr.-Ing. Georgia M. Kapitsaki
Lecturer
Dept. of Computer Science
tel: +357-22892692
University of Cyprus
www.cs.ucy.ac.cy/~gkapi/
http://www.cs.ucy.ac.cy/seit/


Re: [GSOC] SPDX Parser libraries project

Philip Odence
 

This is great, Ahmed.
I¹m transferring this thread to the SPDX Tech Team list from the General
mailing list.

On 3/8/14, 11:23 PM, "ahi" <ahm3d.hisham@gmail.com> wrote:

Hello,
First allow me to introduce myself, My name is Ahmed Hisham I am
currently a CS student at the German University in Cairo. I hope to
spend the summer working on the SPDX parser libraries project list on
the idea page at
http://www.linuxfoundation.org/collaborate/workgroups/gsoc/gsoc-2014-spdx-
projects.

I have a couple of questions about the project, regarding what version
of the spec is it expected to support.
Should it support older version than the current spec ?
Should it partially support the upcoming spec 2.0 ? If so is there a
publicly available working draft?
I say partially as the spec is expected to be release in august and by
then the summer of code will be at its end.

Best Regards,
Ahmed
_______________________________________________
Spdx mailing list
Spdx@lists.spdx.org
https://lists.spdx.org/mailman/listinfo/spdx


[GSOC] SPDX Parser libraries project

Ahmed Hisham Ismail
 

Hello,
First allow me to introduce myself, My name is Ahmed Hisham I am
currently a CS student at the German University in Cairo. I hope to
spend the summer working on the SPDX parser libraries project list on
the idea page at
http://www.linuxfoundation.org/collaborate/workgroups/gsoc/gsoc-2014-spdx-projects.

I have a couple of questions about the project, regarding what version
of the spec is it expected to support.
Should it support older version than the current spec ?
Should it partially support the upcoming spec 2.0 ? If so is there a
publicly available working draft?
I say partially as the spec is expected to be release in august and by
then the summer of code will be at its end.

Best Regards,
Ahmed


New Items and SPDX General Meeting reminder

Philip Odence
 

A couple of items in addition to the regular reminder about the upcoming general meeting:
  • The Linux Foundation has dedicated a track to SPDX at the upcoming Linux Collaboration Summit, March 25-28. It will include introductory session for newbees as well as working sessions for the various teams. And, the Tech Team has scheduled a full day session on the 25th. Jack has posted the agenda.
  • It would be great if you could take 10 mins and respond to the Future of Open Source Survey. This is an annual community effort and the result of collaboration between more than 40 organizations from the open source community. Sorry for the late notice, but the survey needs to be completed by this Wednesday.
GENERAL MEETING

Meeting Time: Thurs, March 6, 8am PST / 10 am CST / 11am EST / 15:00 UTC. http://www.timeanddate.com/worldclock/converter.html

Conf call dial-in:
Conference code:  7812589502
Toll-free dial-in number (U.S. and Canada):  (877) 435-0230
International dial-in number: (253) 336-6732
For those dialing in from other regions, a list of toll free numbers can be found: 
https://www.intercallonline.com/portlets/scheduling/viewNumbers/viewNumber.do?ownerNumber=6053870&audioType=RP&viewGa=false&ga=OFF

 
Administrative Agenda
Attendance
Approve Minutes- 

Technical Team Report - Kate


Legal Team Report - Jilayne


Business Team Report – Jack


Cross Functional Issues – Phil


SPDX Announcements

Philip Odence
 

I am pleased to announce that Paul Madick and Mikael Söderberg will be joining the leadership of SPDX. Paul will co-lead the Legal Team with Jilayne, and Mikael will be Jack's co-lead on the Business Team. Both are terrific additions to the organization and we are excited to welcome them aboard.

Paul is an experienced open source attorney serving as Senior Counsel in HP's Cloud Computing & Open Source group in the Office of the General Counsel  and has already been a regular contributor to the Legal Team. Mikael is CTO and founder of Pelagicore where he has been an evangelist for the use of open source in automotive In-Vehicle Infotainment systems. Based in Sweden, Mikael is keen to build awareness of SPDX in Europe. 

Big thanks to Scott Lamons for his work as Business Team co-lead. He's been a big contributor to the effort for years, and it's been a personal pleasure for me to work with him. The good news is that Scott plans to stay active, so this is not farewell by any means.

On more operational notes: 
Best regards,
Phil

L. Philip Odence
Vice President of Corporate and Business Development
Black Duck Software, Inc.
8 New England Executive Park, Suite 211, Burlington MA 01803
Phone: 781.810.1819, Mobile: 781.258.9502
Skype: philip.odence


FOSSology+SPDX [Crossposting]

Matt Germonprez <germonprez@...>
 

Hi everyone, 

Not sure if you saw this thread over at FOSSology. I think it might be of interest to SPDX too. 

Regards,
Matt


************

Hi All, Bob,

 

This is Kotrappa, from Wipro Technologies India.

We are using Fossology on a local sever for scanning some of packages for License/copyright info.

Recently we have installed Fossology+SPDX module on a local PC, and this gives spdx results as well.

 

Spdx.org gives open source tools to convert .rdf to .spdx, .spdx to .rdf, .xls to.rdf etc.

Reference http://spdx.org/spdx-tools/tools-from-the-spdx-workgroup

 

We would like to know after Fossology+SPDX scans a package and gives results in sdpx format,

Is there any command line tools to execute on command prompt in Local PC using localhost server running Fossology agents to get results in spdx format.

( Please note I cannot use Web Interface version of https://fossologyspdx.ist.unomaha.edu/?mod=Default because packages cannot be uploaded to public)

 

I mean, I should be able to get results something like mypackage_name.spdx or mypackage_name.rdf which complies with SPDX format

specified in spdx.org, which I can use as an input to spdx open source tools for conversion, comparison etc.

 

Please help.

 

Best regards

Kotrappa.


************


Hi Kotrappa,

I’m confused why you mention that you cannot use fossologyspdx.ist.unomaha.edu since you have installed the spdx module on your own local machine.  You shouldn’t have to use the unomaha machine since you have it installed locally.

Since you have installed the FOSSology+SPDX module on your local PC, then you can create spdx files (tag files).  That option is the default but is specified in the “Output File Type” pull down on the SPDX Edit screen.  So though we call it a .tag file, I think that is the same as the .spdx file.

The command line (web api) doc is at:


However, this does not generate the full .spdx (tag) output.

If I have not understood your question completely, please ask again.  Liang Cao is the author of the SPDX module and he is on this list as well.

Thanks,
Bob Gobeille

************

Hi Kotrappa,

Liang Cao has added an option to generate a full SPDX document in TAG format from the command line. He has also provided a nice overview of how to work with the source. 

The source is pushed to here:

The documentation is here:

The option for [fullSPDXFlag] is added.
[fullSPDXFlag]: true/false. Only when this option is set to "true", low definition version of the full SPDX contents are output. Skipping this option equals setting it to "false." This option should be set to "true" when you want to generate an SPDX document from the command line.

You could generate a mypackagename.spdx by running a command like the following:
wget -qO - --no-check-certificate --post-file=./[mypackagename] --timeout=0 "https://domain/?mod=spdx_license_once&noCopyright=false&jsonOutput=false&fullSPDXFlag=true&packageNameInLog=[mypackagename]" > [mypackagename].spdx

for example:

If you have any questions, please feel free to contact me or Liang. We are happy to help. 

Regards,
Matt Germonprez and Liang Cao

--
Mutual of Omaha Associate Professor of Information Systems
University of Nebraska at Omaha
Vita
Open Communities Lab


Reminder- SPDX General Meeting Pushed to Thurs, Feb 13

Philip Odence
 

Meeting Time: Thurs, Feb 13, 8am PST / 10 am CST / 11am EST / 15:00 UTC. http://www.timeanddate.com/worldclock/converter.html

Conf call dial-in:
Conference code:  7812589502
Toll-free dial-in number (U.S. and Canada):  (877) 435-0230
International dial-in number: (253) 336-6732
For those dialing in from other regions, a list of toll free numbers can be found: 
https://www.intercallonline.com/portlets/scheduling/viewNumbers/viewNumber.do?ownerNumber=6053870&audioType=RP&viewGa=false&ga=OFF

 
Administrative Agenda
Attendance
Approve Minutes- 
http://wiki.spdx.org/view/General_Meeting/Minutes/2014-01-02 

Technical Team Report - Kate


Legal Team Report - Jilayne


Business Team Report – Jack



Cross Functional Issues – Phil


Registration Information for Linux Collab Summit in March and SPDX Meetings

Manbeck, Jack
 

All,

 

The Linux Collaboration summit is this coming March, 26-28th. There will be a technical team meeting prior to the summit on the 25th to do a deep dive on the SPDX 2.0 data model and a session for SPDX on Friday (still working to secure the room). As the Agendas firm up we will post them.

 

To register for the conference use this link:

 

 https://www.regonline.com/register/login.aspx?eventID=1250683

 

When registering use the SPDX workgroup code  SPDX14LFCS and choose the "Invitation Acceptance" registration type.

 

We hope to see many of you there.

 

Best regards,

 

Jack Manbeck

Business Team Co-Chair

 

641 - 660 of 1527