Hi SPDX, I was refreshing the license info on a Debian package and found two licenses that seemed to be MIT-variants that I wasn't sure about. The reason I looked at it was mostly technical as the cur

We are covering SBOMs today, so perhaps of interest :) Begin forwarded message: From: "Shane Coughlan via lists.openchainproject.org" <scoughlan=linuxfoundation.org@...> Subject: [openchain] OpenChain

This week’s meeting with feature two GSoC presentations. Note I have a conflict so Gary will host. PLEASE: When you sign in, please include your name and company (or put them in the chat) to facilitat

As a follow-up to this morning SPDX general meeting, below is the information on the upcoming SPDX DocFest: The SPDX project will be hosting an initial working "DocFest" to bring together the producer

SPDX Community, As previewed in the June General Meeting, the Core Team has submitted a proposal for changing the governance of SPDX. The reasoning for the change and substance are the same as what we

We will deviate from our usual standing agenda for this special meeting. We will start with a presentation from a Google Summer of Code student (see topic below) and then will pick up the discussion o

SPDX Community, Minutes: https://wiki.spdx.org/view/General_Meeting/Minutes/2021-09-02 As you are aware, in last week’s meeting we discussed a proposal to change the SPDX workgroup’s governance framew

I’m pleased to announce that SPDX is now ISO/IEC 5962:2021. Many people have worked hard over the last decade to get us to this point. Big credit goes to my Steering Committee colleagues who have all

A couple of special items for this month’s meeting: Quick status of updated SPDX governance Short presentation by VM (Vicky) Brasseur, Director, Senior Strategy Advisor at Wipro. Her company has recen

There were a few of anonymous participants that I did not include in the count. It would be helpful to get names for these minutes and to use them for future meetings. Also, while it’s not required to

Hi Pierre, I am moving the general SPDX list to BCC and sending this via the SPDX legal list, as that is the right place for this question! Also not - I have approved your message and copied you here

Hello, I am trying to identify this software in term of license expression https://github.com/nothings/stb It's is claimed to be "public domain or MIT". I don't see any license identifier for public d

Apologies for the late reminder. Notes: For Euro folks, time diff is off by an hour as US doesn’t go back to standard time until this weekend We will have a Google Summer of Code presentation on Json

Came up on the call today. For those interested, here is an overview: https://asia.nikkei.com/Business/China-tech/New-China-data-transfer-rules-to-be-costly-for-foreign-companies Asia SPDX Meeting Whe

https://wiki.spdx.org/view/General_Meeting/Minutes/2021-11-04 General Meeting/Minutes/2021-11-04 < General Meeting‎ | Minutes · Attendance: 25 · Lead by Phil Odence · Minutes from last approved · Comp

Hi all, Great news: ISO SPDX standard is now publicly available at: https://standards.iso.org/ittf/PubliclyAvailableStandards/ Best regards, Marc-Etienne

A taxonomy of this SSC ecosystem. I would like to have one, plz&thx. For instance, looking at this (very much work in progress, just noodling about as I think about things) picture, those items in eac

REMINDER: Today is the OpenChain Automation Case Study “virtual supply chain” showing code going through multiple scanners and maintaining SPDX integrity @ 09:00 UTC. We will hold it on Zoom: https://

REMINDER: OpenChain Automation Case Study showing SPDX Software Bill of Materials being used in a “virtual supply chain” @ 09:00 UTC. Join without registration here: https://zoom.us/j/4377592799 Every