Yes, understood. Thanks, Dick. For that use case, the President was more concerned with a cyber attack that a license violation. This is the point of evolving SPDX to be “configurable” with profiles t

Thanks, Matija. Absolutely not just license compliance. Security too is a big driver and an important part/direction of SPDX. From: spdx@... <spdx@...> on behalf of Matija Šuklje

I believe that is correct. It seems an odd systems, but as I understand it, it’s not unusual to have free and paid for versions of specs with the same content. Openchain is, I believe, and example of

We may quote you on that! From: spdx@... <spdx@...> on behalf of Shane Coughlan <scoughlan@...> Date: Thursday, September 9, 2021 at 9:16 PM To: spdx@...

I’m pleased to announce that SPDX is now ISO/IEC 5962:2021. Many people have worked hard over the last decade to get us to this point. Big credit goes to my Steering Committee colleagues who have all

SPDX Community, Minutes: https://wiki.spdx.org/view/General_Meeting/Minutes/2021-09-02 As you are aware, in last week’s meeting we discussed a proposal to change the SPDX workgroup’s governance framew

Thanks, Sebastian for your thoughts, support and understanding. Regarding licensing, my sense was that your desire to make the spec easy to publish is covered by the proposed licensing scheme. Perhaps

We will deviate from our usual standing agenda for this special meeting. We will start with a presentation from a Google Summer of Code student (see topic below) and then will pick up the discussion o

SPDX Community, As previewed in the June General Meeting, the Core Team has submitted a proposal for changing the governance of SPDX. The reasoning for the change and substance are the same as what we

This week’s meeting with feature two GSoC presentations. Note I have a conflict so Gary will host. PLEASE: When you sign in, please include your name and company (or put them in the chat) to facilitat

Whoops! https://wiki.spdx.org/view/General_Meeting/Minutes/2021-07-01 There were several attendees who’s organizations I don’t know. Please let me know and I will amend. Thanks. Phil General Meeting/M

You should by this time have a new recurring meeting invite on your calendar with the Jitsi. PLEASE: When you sign in, please include your name and company (or put them in the chat) to facilitate logg

We’ve had some new players joining. The minutes log names and companies. I didn’t get everyone’s company and there were a couple of phone numbers displayed; it wasn’t clear if those logged in as well

Please accept this recurring invitation “Dial In” info: Join the meeting: https://meet.jit.si/SPDXGeneralMeeting To join by phone instead, tap this: +1.512.647.1431,,1310118349# Looking for a differen

I will be sending out a replacement invite in a few hours. Please clear your calendar. Thanks, Phil

Because we are moving to Jitsi for video conferencing and try to avoid confusion, I will delete the old invite, wait a few hours and then send out a new one with the new information. To start the meet

I’m sure most of you are aware of the executive order by now. The draws attention to SPDX and the LF is keen to show the project in its best light. As such we are adding a page to the website to displ

https://wiki.spdx.org/view/General_Meeting/Minutes/2021-05-06 L. Philip Odence General Manager, Black Duck Audit Business Synopsys Software Integrity Group, Burlington, MA M (781) 258-9502 | phil.oden

You may be aware that based on SPDX community input we decided to move away from Uberconference. Initially the thought was to move to Zoom, but we are trying an open source alternative, Jitsi. Assumin