Kim Weins twisted the bytes to say:

 Kim> Their are several commercial tools that do this, but we also feel that open
 Kim> source tools will be critical.  Today there are a couple of OSS tools that
 Kim> can help find and identify open source licenses.  One is FOSSology (created
 Kim> and maintained by HP) which is available at fossology.org.  They are also
 Kim> hosting it at OSU's Open Source Lab.  Another is ninka (
 Kim> http://ninka.turingmachine.org/) which was created by Daniel German.  I've
 Kim> cc'd Daniel -- since you may want to talk to him about some of his
 Kim> experience doing this.  I don't believe FOSSology or Ninka will generate an
 Kim> SPDX file (yet).  We also have some free OSS tools on the spdx.org site that
 Kim> can help you convert a software bill of materials from spreadsheet form into
 Kim> SPDX format.  However that assumes you already have the info about what open
 Kim> source licenses are included.

I wrote some scripts that will actually do a decent job of generating an
SPDX document. The only (challenge|problem) is that Ninka does not recognized
many of the SPDX licenses. here is an example, using Linux as the Guinea pig:

http://turingmachine.org/~dmg/temp/linux-3.0.2.spdx.v0.1

Notice that this is not a true SPDX compliant document:

- It is licensed under the Creative Commons.
- It has some extra tags that I find useful.
- It does not contain a verification code.

--dmg

--
Daniel M. German
http://turingmachine.org/
http://silvernegative.com/
dmg (at) uvic (dot) ca
replace (at) with @ and (dot) with .

All:

For discussion on today's "All Hands Call", below please find (i) a revised
"SPDX TM License" draft and (ii) draft Attribution Statements.

Many thanks,

Rockett

***

SPDX™ Trademark License (v2) (new text in underlined)



The “SPDX” and “Software Package Data Exchange” trademarks (collectively,
“SPDX Trademarks”) are owned by the SPDX Workgroup, which is sponsored by
the Linux Foundation (“LF”).  LF holds the SPDX Trademarks in trust for the
SPDX Workgroup.  The SPDX Workgroup hereby grants you a royalty-free,
non-exclusive, non-assignable, non-transferable, non-sublicensable,
world-wide license to use its SPDX Trademarks in connection with files
containing software licensing information if you: (i) solely use the SPDX
Trademarks in connection with files containing all of the SPDX “Mandatory
Fields” as defined in the applicable version of the SPDX specification as
published on www.spdx.org ("SPDX Specification"); (ii) solely uses the SPDX
Trademarks in connection with files that do not utilize additional fields,
unless such additional fields are (a) “Optional Fields” as defined in the
applicable version of the SPDX Specification or (b) otherwise explicitly
permitted in the applicable version of the SPDX Specification; (iii) recite
the applicable SPDX Specification version in, or with, your use of any of
the SPDX Trademarks; and (iv) fully comply with (a) the applicable version
of the SPDX Specification and (b) the license (Creative Commons Attribution
License 3.0 Unported (also known as CC-BY-3.0)) under which each SPDX
Specification is offered in its entirety.



This SPDX TM License shall automatically be revoked in perpetuity if you
fail to comply with any of the above requirements.  A revoked SPDX TM
License may only be restored by (i) you submitting a petition for
restoration to the Legal Team of the SPDX Workgroup (“Legal Team”), (ii)
attending any required meetings for inquiry in the circumstances, and (iii)
a consensus of the Legal Team to restore your license.

***

(ii) draft Attribution Statements.

New Section 1.7.2

1.7.2.1 The official copyright notice to be used with any verbatim
reproduction and/or distribution of this SPDX Specification 1.0 is:

"Official SPDX Specification 1.0.  Copyright © 2010-2011 Linux Foundation
and its Contributors.  Licensed under the Creative Commons Attribution
License 3.0 Unported.  All other rights are expressly reserved."

-- note, we should add the same to Section 2.1 to be embedded in compliant
"SPDX files" --


1.7.2.2 The official copyright notice to be used with (i) any non-verbatim
reproduction and/or distribution of this SPDX Specification, including
without limitation any partial use or combining this SPDX Specification with
another work, or (ii) any SPDX file which is not compliant with this SPDX
Specification and SPDX Trademark License, is:

"This is not an official SPDX Specification or SPDX file.  Portions herein
have been reproduced from SPDX Specification 1.0 found at www.spdx.com.
These portions are Copyright © 2010-2011 Linux Foundation and its
Contributors, and are licensed under the Creative Commons Attribution
License 3.0 Unported by the Linux Foundation and its Contributors.  All
other rights are expressly reserved by Linux Foundation and its
Contributors."

***

--

Motorola Mobility, Inc.
E.A. Rockett
Senior Counsel
Software, Applications &
Digital Content Licensing
(408)541-6703 (O)
(408)541-6900 (F)
(415)508-7625 (M)
rockett@...

_______________________________________________
Spdx-legal mailing list
Spdx-legal@...
https://fossbazaar.org/mailman/listinfo/spdx-legal