Armijn said: > Current information inside SPDX documents is largely static […] > This would make SPDX a lot more cumbersome, as not only do the documents need to be generated, but they also need to be

#spdx

Hi Vicky, There's been some great work in the OSS Compliance Tooling Group which addresses this – if you're asking what I think you're asking. See: https://github.com/Open-Source-Compliance/Sharing-cr

I'm glad this topic came up, because I hadn't heard of spdx-license-diff before, and now I have it installed. That's a pretty good start to a Friday! Thanks, Alan! steve

Hi all, I first heard about SW360 during the presentations at the Linux Open Source Summit in Edinburgh. Searching around, though, I see very little mention of it, to the point where it's difficult to