SPDX Wiki - User contributions [en]

Business Team/Minutes/2012-04-12

2012-04-12T16:14:39Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Michael Herzog nexB</li><li>Chuck Gadreaux</li><li>Gary O'Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer </li><li>Steve Cropper</li><li>Mark Gisi</li></ul>Agenda<ul><li>Turnover to Jack/Scott</li><li>Debrief on SPDX Forum</li><ul><li>Contact info</li><li>Follow up email</li></ul><li>Web site</li><li>v2 Process</li><li>Adoption</li><ul><li>Communities</li><li>Companies</li><li>Tools</li></ul></ul>Minutes<ul><li>SPDX Forum</li><ul><li>Think the forum went really well -- good number of new folks especially on legal side</li><li>Gary O'Neall -- attracted large companies, bit</li><li>Really happy with volume and participation</li><li>Worked well to get new people involved.</li><li>Follow up</li><ul><li>Kim to email to everyone that attended/registered as follow up</li><li>Send list of companies (not names) to spdx list and in follow up</li><li>save for invites for next year</li><li>send list to core team for access</li><li>need to post meeting times for each group on website and send agenda/reminder day before and include link</li><li>post notes from Kate onto web site</li></ul><li>At General meeting -- need to discuss handling of emails - also discussion of users list</li><li>Might make sense for LF to add as a standard add-on day at Collab Summit or as a separate event</li><ul><li>If needed could get a shuttle from SF hotel of collab summit to south bay</li><li>Still treat it as a separate event though and promote separately</li><li>COuld it attach to LinuxCon events (evening)</li><li>May be better to be in Silicon Valley for a couple of years</li></ul></ul><li>Web site</li><ul><li>Kirsten has completed home page for new site</li><li>Not sure about rest of site</li><li>Still a fair number of empty things in new hierarchy</li><li>Think Steve/Martin/Pierre are following up</li><li>Want to make sure that existing pages move over</li></ul><li>Adoption</li><ul><li>Communities</li><ul><li>Outreach to communities follow up from</li><ul><li>We target 4 possible communities</li><li>Kernel - Phil O to follow up with Jim Zemlin</li><li>Uboot - Kate and Jack to reach out</li><li>BusyBox - Mark G to reach out</li><li>Samba - Scott L to follow up.  Scott has message in to Samba - Jeremey Allison</li></ul></ul><li>Companies</li><ul><li>SPDX Forum was great for awareness, but need to figure out where to go from here.</li><li>How do we adapt into the corporate environment and mental model?  Existing technical teams in companies have existing approach (like tied to SCM at Juniper) so how do you fit in to that - both technically and process wise?</li><li>Could we document process use cases and share them in whitepaper or preso on web site?</li><li>How do we work with a few early adopters and get them going and share their strategies?</li><li>Tech team is moving toward a migration path (vs tight backward compatibility)</li></ul><li>Tools</li><ul><li>Gary O'Neall is prototyping how to have hosted tools on web somewhere</li><li>There is a license matching prototype that Peter has posed</li><li>Ninka is working to produce SPDX</li><li>Scott Lamons working with U of Nebraska-Omaha to get Fossology up and running</li><ul><li>Gary O Neall working with them as well</li></ul></ul></ul></ul>

Business Team/Minutes/2012-04-12

2012-04-12T16:04:00Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Michael Herzog nexB</li><li>Chuck Gadreaux</li><li>Gary O'Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer </li><li>Steve Cropper</li><li>Mark Gisi</li></ul>Agenda<ul><li>Turnover to Jack/Scott</li><li>Debrief on SPDX Forum</li><ul><li>Contact info</li><li>Follow up email</li></ul><li>Web site</li><li>v2 Process</li><li>Adoption</li><ul><li>Communities</li><ul><li>Outreach to communities</li><ul><li>Scott has message in to Samba - Jeremey Allison</li></ul></ul><li>Companies</li><ul><li>SPDX Forum was great for awareness, but need to figure out where to go from here.</li><li>How do we adapt into the corporate environment?  Existing technical teams have existing approach (like SCM at Juniper) so how do you fit in to that - both technically and business wise?</li><li>Could we document process use cases and share them in whitepaper or preso on web site?</li><li></li></ul><li>Tools</li><ul><li>Gary O'Neall is prototyping how to have hosted tools on web somewhere</li><li>There is a license matching prototype that Peter has posed</li><li>Ninka is working to produce SPDX</li><li>Scott Lamons working with U of Nebraska-Omaha to get Fossology up and running</li><ul><li>Gary O Neall working with them as well</li></ul></ul></ul></ul>Minutes<ul><li>SPDX Forum</li><ul><li>Think the forum went really well -- good number of new folks especially on legal side</li><li>Gary O'Neall -- attracted large companies, bit</li><li>Really happy with volume and participation</li><li>Worked well to get new people involved.</li><li>Follow up</li><ul><li>Kim to email to everyone that attended/registered as follow up</li><li>Send list of companies (not names) to spdx list and in follow up</li><li>save for invites for next year</li><li>send list to core team for access</li><li>need to post meeting times for each group on website and send agenda/reminder day before and include link</li><li>post notes from Kate onto web site</li></ul><li>At General meeting -- need to discuss handling of emails - also discussion of users list</li><li>Might make sense for LF to add as a standard add-on day at Collab Summit or as a separate event</li><ul><li>If needed could get a shuttle from SF hotel of collab summit to south bay</li><li>Still treat it as a separate event though and promote separately</li><li>COuld it attach to LinuxCon events (evening)</li><li>May be better to be in Silicon Valley for a couple of years</li></ul></ul><li>Web site</li><ul><li>Kirsten has completed home page for new site</li><li>Not sure about rest of site</li><li>Still a fair number of empty things in new hierarchy</li><li>Think Steve/Martin/Pierre are following up</li><li>Want to make sure that existing pages move over</li></ul><li>Adoption</li><ul><li>Communities</li><ul><li>Outreach to communities follow up from </li><ul><li>Scott has message in to Samba - Jeremey Allison</li></ul></ul><li>Companies</li><ul><li>SPDX Forum was great for awareness, but need to figure out where to go from here.</li><li>How do we adapt into the corporate environment and mental model?  Existing technical teams in companies have existing approach (like tied to SCM at Juniper) so how do you fit in to that - both technically and process wise?</li><li>Could we document process use cases and share them in whitepaper or preso on web site?</li><li>How do we work with a few early adopters and get them going and share their strategies?</li><li>Tech team is moving toward a migration path (vs tight backward compatibility)</li></ul><li>Tools</li><ul><li>Gary O'Neall is prototyping how to have hosted tools on web somewhere</li><li>There is a license matching prototype that Peter has posed</li><li>Ninka is working to produce SPDX</li><li>Scott Lamons working with U of Nebraska-Omaha to get Fossology up and running</li><ul><li>Gary O Neall working with them as well</li></ul></ul></ul></ul>

Business Team/Minutes/2012-04-12

2012-04-12T14:51:40Z

Kweins:

Attendees<ul><li>Kim Weins</li></ul> Agenda<ul><li>Turnover to Jack/Scott</li><li>Debrief on SPDX Forum</li><ul><li>Contact info</li><li>Follow up email</li></ul><li>Web site</li><li>Adoption</li><ul><li>Communities</li><li>Companies</li></ul></ul>Minutes

Business Team/Minutes/2012-04-12

2012-04-12T14:51:02Z

Kweins:

Attendees<ul><li>Kim Weins</li></ul> Agenda<ul><li>Turnover to Jack/Scott</li><li>Debrief on SPDX Forum</li><li>Web site</li><li>Adoption</li><ul><li>Communities</li><li>Companies</li></ul></ul>Minutes

Business Team/Minutes/2012-04-12

2012-04-12T14:48:27Z

Kweins:

Attendees<ul><li>Kim Weins</li></ul> Agenda<ul><li>Turnover to Jack/Scott</li><li>Debrief on SPDX Forum</li><li>Web site</li><li>Adoption</li></ul>Minutes

Business Team/Minutes/2012-03-15

2012-03-15T15:49:37Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Mark Gisi</li><li>Phil Odence</li><li>Jilayne Lovejoy</li><li>Steve Cropper</li><li>Chuck Gadreaux</li><li>Gary O'Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li></ul> Agenda<ul><li>Collab Summit</li><ul><li>Schedule</li><ul><li>Panel on Tuesday afternoon - Phil O organizing</li><li>Wed - Mark Gisi, SPDX Overview</li><li>Wed PM - room</li><li>Thurs - Workgroup</li><li>Biz team</li><ul><li>SPDX Forum prep</li><li>Adoption</li><li>Process for license list</li><li>Would also like update on 1.1, 2.0 update from tech team - what is needed (not how)</li><li>Web site</li></ul></ul></ul><li>SPDX Forum</li><ul><li>Agenda</li><li>Invites for registration</li><ul><li>LF lists  (mailing ahead of time, invite at conference) - Done</li><li>Jim Zemlin (reach out to LF members) - Kim</li><li>Smaller people thru VCs - Gary</li><li>Mark Radcliffe - Kim</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations - Jilayne</li></ul><li>Handout?</li><li>Logistics</li><ul><li>Lunch, room, flipchart</li></ul><li>Transportation</li></ul><li>Web site</li></ul>

Business Team/Minutes/2012-03-15

2012-03-15T15:22:17Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Mark Gisi</li><li>Phil Odence</li><li>Jilayne Lovejoy</li><li>Steve Cropper</li><li>Chuck Gadreaux</li><li>Gary O'Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li></ul> Agenda<ul><li>Collab Summit</li><ul><li>Schedule</li><ul><li>Panel on Tuesday afternoon - Phil O organizing</li><li>Wed - Mark Gisi, SPDX Overview</li><li>Wed PM - room</li><li>Thurs - Workgroup</li><li>Biz team</li><ul><li>SPDX Forum prep</li><li>Adoption</li><li>Process for license list</li><li>Would also like update on 1.1, 2.0 update from tech team - what is needed (not how)</li></ul></ul></ul><li>SPDX Forum</li><ul><li>Agenda</li><li>Invites for registration</li><ul><li>LF lists  (mailing ahead of time, invite at conference) - Done</li><li>Jim Zemlin (reach out to LF members) - Kim</li><li>Smaller people thru VCs - Gary</li><li>Mark Radcliffe - Kim</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations - Jilayne</li></ul><li>Handout?</li><li>Logistics</li><ul><li>Lunch, room, flipchart</li></ul><li>Transportation</li></ul><li>Web site</li></ul>

Business Team/Minutes/2012-03-15

2012-03-15T15:17:00Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Mark Gisi</li><li>Phil Odence</li><li>Jilayne Lovejoy</li><li>Steve Cropper</li><li>Chuck Gadreaux</li><li>Gary O'Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li></ul> Agenda<ul><li>Collab Summit</li><ul><li>Schedule</li><ul><li>Panel on Tuesday afternoon - Phil O organizing</li><li>Wed - Mark Gisi, SPDX Overview</li><li>Wed PM - room</li><li>Thurs - Workgroup </li><li>Biz team</li><ul><li>SPDX Forum prep</li><li>Adoption</li><li>Process for license list</li><li>Would also like update on 1.1, 2.0 update from tech team - what is needed (not how)</li></ul></ul></ul><li>SPDX Forum</li><ul><li>Agenda</li><li>Invites for registration</li><ul><li>LF lists  (mailing ahead of time, invite at conference) - Done</li><li>Jim Zemlin (reach out to LF members) - Kim</li><li>Smaller people thru VCs - Gary</li><li>Mark Radcliffe - Kim</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations - Jilayne</li></ul><li>Handout?</li><li>Logistics</li><ul><li>Lunch, room, flipchart</li></ul><li>Transportation</li></ul><li>Web site</li></ul>

Business Team/Minutes/2012-03-15

2012-03-15T15:01:42Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Mark Gisi</li><li>Phil Odence</li><li>Jilayne Lovejoy</li><li>Steve Cropper</li><li>Chuck Gadreaux</li><li>Gary O'Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li></ul> Agenda<ul><li>Collab Summit</li><ul><li>Schedule</li><li>Agenda for Biz team</li></ul><li>SPDX Forum</li><ul><li>Agenda</li><li>Invites for registration</li><ul><li>LF lists  (mailing ahead of time, invite at conference) - Done</li><li>Jim Zemlin (reach out to LF members) - Kim</li><li>Smaller people thru VCs - Gary</li><li>Mark Radcliffe - Kim</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations - Jilayne</li></ul><li>Handout?</li><li>Logistics</li><ul><li>Lunch, room, flipchart</li></ul><li>Transportation</li></ul><li>Web site</li></ul>

Business Team/Minutes/2012-03-15

2012-03-15T15:00:12Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Mark Gisi</li><li>Phil Odence</li><li>Jilayne Lovejoy</li></ul> Agenda<ul><li>Collab Summit</li><ul><li>Schedule</li><li>Agenda for Biz team</li></ul><li>SPDX Forum</li><ul><li>Agenda</li><li>Invites for registration</li><ul><li>LF lists  (mailing ahead of time, invite at conference) - Done</li><li>Jim Zemlin (reach out to LF members) - Kim</li><li>Smaller people thru VCs - Gary</li><li>Mark Radcliffe - Kim</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations - Jilayne</li></ul><li>Handout?</li><li>Logistics</li><ul><li>Lunch, room, flipchart</li></ul><li>Transportation</li></ul><li>Web site</li></ul>

Business Team/Minutes/2012-03-15

2012-03-15T14:48:01Z

Kweins:

Agenda<ul><li>Collab Summit</li><ul><li>Schedule</li><li>Agenda for Biz team</li></ul><li>SPDX Forum</li><ul><li>Agenda</li><li>Invites for registration</li><ul><li>LF lists  (mailing ahead of time, invite at conference) - Done</li><li>Jim Zemlin (reach out to LF members) - Kim</li><li>Smaller people thru VCs - Gary</li><li>Mark Radcliffe - Kim</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations - Jilayne</li></ul><li>Handout?</li><li>Logistics</li><ul><li>Lunch, room, flipchart</li></ul><li>Transportation</li></ul><li>Web site</li></ul>

Business Team/Minutes/2012-03-15

2012-03-15T14:45:08Z

Kweins:

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-15T14:42:03Z

Kweins:

Old/SPDX Forum Agenda

2012-03-15T14:40:53Z

Kweins:

SPDX Forum Agenda<ul><li>9:00-9:15 Welcome & Intro (Kim Weins)</li><li>9:15-10:00 Setting the Stage on OSS Compliance (Mark Radcliffe)</li><li>10:00-10:30 Discussion: The Challenges of OSS Compliance Today (All)</li><li>10:30-10:45 Break</li><li>10:45-11:45 SPDX Primer:  What is SPDX and How Can it Help (Phil Odence and Kirsten Newcomer)</li><li>11:45-12:00 Morning wrap up, prep for discussion</li><li>12:00-12:15 Break/Grab Lunch</li><li>12:15-1:45 Discussion: Challenges and Approaches to Implementing SPDX led by SPDX End Users</li><ul><li>Cisco, HP, WindRiver, maybe MicroFocus</li></ul><li>1:45-2:00 Break</li><li>2:00-2:20 Getting Started with SPDX  (Gary O Neall and Jilayne)<ul><li>Using the Tools</li><li>Using the License List</li></ul></li><li>2:20-3:00 Wrap up (All) <ul><li>Summary of what's planned beyond 1.0</li><li>Feedback from participants</li><li>Review/Prioritize feedback from throughout the day</li><li>Q&A /Discussion</li><li>Invitation to participate</li></ul></li></ul>

Old/SPDX Forum Agenda

2012-03-15T14:40:16Z

Kweins:

This is the current agenda for the SPDX Forum onApril 6.  The Agenda is still evolving and there may be some changes.<ul><li>9:00-9:15 Welcome & Intro (Kim Weins)</li><li>9:15-10:00 Setting the Stage on OSS Compliance (Mark Radcliffe)</li><li>10:00-10:30 Discussion: The Challenges of OSS Compliance Today (All)</li><li>10:30-10:45 Break</li><li>10:45-11:45 SPDX Primer:  What is SPDX and How Can it Help (Phil Odence and Kirsten Newcomer)</li><li>11:45-12:00 Morning wrap up, prep for discussion</li><li>12:00-12:15 Break/Grab Lunch</li><li>12:15-1:45 Discussion: Challenges and Approaches to Implementing SPDX led by SPDX End Users</li><ul><li>Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?))</li></ul><li>1:45-2:00 Break</li><li>2:00-2:20 Getting Started with SPDX  (Gary O Neall and Jilayne)<ul><li>Using the Tools</li><li>Using the License List</li></ul></li><li>2:20-3:00 Wrap up (All) <ul><li>Summary of what's planned beyond 1.0</li><li>Feedback from participants</li><li>Review/Prioritize feedback from throughout the day</li><li>Q&A /Discussion</li><li>Invitation to participate</li></ul></li></ul>

Old/SPDX Forum Agenda

2012-03-15T14:39:06Z

Kweins:

This is the current agenda for the SPDX Forum onApril 6.  The Agenda is still evolving and there may be some changes.<ul><li>9:00-9:15 Intro (Kim Weins)</li><li>9:15-10:00 Setting the Stage on OSS Compliance (Mark Radcliffe)</li><li>10:00-10:30 Discussion: The Challenges of OSS Compliance Today (All)</li><li>10:30-10:45 Break</li><li>10:45-11:45 SPDX Primer:  What is SPDX and How Can it Help (Phil Odence and Kirsten Newcomer)</li><li>11:45-12:00 Morning wrap up, prep for discussion</li><li>12:00-12:15 Break/Grab Lunch</li><li>12:15-1:45 Discussion: Challenges and Approaches to Implementing SPDX led by SPDX End Users</li><ul><li>Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?))</li></ul><li>1:45-2:00 Break</li><li>2:00-2:20 Getting Started with SPDX  (Gary O Neall and Jilayne)<ul><li>Using the Tools</li><li>Using the License List</li></ul></li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Summary of what's planned beyond 1.0</li><li>Feedback from participants</li><li>Review/Prioritize feedback from throughout the day</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul>

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-12T16:28:14Z

Kweins:

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-12T16:27:31Z

Kweins:

Old/SPDX Forum Agenda

2012-03-12T16:16:58Z

Kweins:

This is the current agenda for the SPDX Forum onApril 6.  The Agenda is still evolving and there may be some changes.<ul><li>Setting the Stage on OSS Compliance - 40 minutes<ul><li>Mark Radcliffe</li></ul></li><li>Discussion: The Challenges of OSS Compliance Today 30 mins</li><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins<ul><li>Phil and Kate</li></ul></li><li>Discussion: Challenges and Approaches to Implementing SPDX led by SPDX End Users</li><ul><li>Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?))</li></ul><li>Getting Started with SPDX  20 minutes (Gary O Neall and Jilayne)<ul><li>Using the Tools</li><li>Using the License List</li></ul></li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Summary of what's planned beyond 1.0</li><li>Feedback from participants</li><li>Review/Prioritize feedback from throughout the day</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul>

Old/SPDX Forum Agenda

2012-03-12T15:14:15Z

Kweins:

Updated Agenda<ul><li>Stage Setting on OSS Compliance - 40 minutes<ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul></li><li>Discussion: The Challenges of OSS Compliance Today 30 mins<ul><li>Discussion at tables and then present info to the group</li></ul></li><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins<ul><li>Phil and Kate</li><li>will include info on what is in current spec and highlights of 2.0 and info on involving  OSS community</li></ul></li><li>End User Discussion Groups led by (Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?))</li><ul><li>Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>How SPDX fits into a Corporate Compliance Program -- 1 hrs</li></ul><li>Getting Started with SPDX  20 minutes (Gary O Neall and Jilayne)<ul><li>Using the Tools</li><li>Using the License List</li></ul></li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Summary of what's on the table beyond 1.0</li><li>Capture any additional feedback</li><li>Review/Prioritize feedback from throughout the day</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul>

Old/SPDX Forum Agenda

2012-03-12T15:02:23Z

Kweins:

Updated Agenda<ul><li>Stage Setting on OSS Compliance - 40 minutes<ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul></li><li>Discussion: The Challenges of OSS Compliance Today 30 mins<ul><li>Discussion at tables and then present info to the group</li></ul></li><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins<ul><li>Phil and Kate</li><li>will include info on what is in current spec and highlights of 2.0 and info on involving  OSS community</li></ul></li><li>End User Discussion Groups led by (Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?))</li><ul><li>Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>How SPDX fits into a Corporate Compliance Program -- 1 hrs</li></ul><li>Tools for Getting Started with SPDX  20 minutes (Gary O Neall and Jilayne)<ul><li>Using the Tools</li><li>Using the License List</li></ul></li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Summary of what's on the table beyond 1.0</li><li>Capture any additional feedback</li><li>Review/Prioritize feedback from throughout the day</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul>

Old/SPDX Forum Agenda

2012-03-12T14:57:48Z

Kweins:

Updated Agenda<ul><li>Stage Setting on OSS Compliance - 40 minutes<ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul></li><li>Discussion: The Challenges of OSS Compliance Today 30 mins<ul><li>Discussion at tables and then present info to the group</li></ul></li><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins<ul><li>Phil and Kate</li><li>will include info on what is in current spec and highlights of 2.0 and info on involving  OSS community</li></ul></li><li>End User Panel: How SPDX fits into a Corporate Compliance Program -- 1 hrs<ul><li>Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?)</li></ul></li><li>Getting Started with SPDX preso  40 minutes (Gary O Neall and Jilayne)<ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li><li>will include info on 2.0 that maybe relevant</li></ul></li><li>Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul>

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-10T01:54:28Z

Kweins:

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-07T16:08:58Z

Kweins:

SPDX Forum: Managing Open Source Licenses with Suppliers and Customers April 6, 2012San Jose, CAThe SPDX Forum is a one-day forum that will help companies learn how to streamline their open source license compliance processes.  The forum will bring together procurement, supply chain, legal and technical staff at companies that use open source technologies in their products to discuss challenges and best practices for complying with open source licenses across the software supply chain.  We will also discuss how the SPDX(TM) (Software Package Data Exchange) standard, developed by a workgroup of the Linux Foundation, can help companies to improve and streamline compliance efforts.Topics covered will include:State of Open Source ComplianceGet the latest on what's going on in the area of open source compliance.  Find out about the latest trends, legal actions and best practices.Discussion: The Challenges of OSS Compliance TodayParticipate in a discussion with your peers about the challenges you face in complying with open source licensesSPDX Primer:  What is SPDX and How Can it HelpFind out how the SPDX standard can help streamline compliance by creating a common format for sharing open source license information across the software supply chain -- from communities to companies to customers. End User Panel: How Does SPDX Fit into a Corporate Compliance ProgramFind out more about how companies like Cisco, HP and WindRiver are looking to leverage SPDX in their corporate open source compliance efforts. Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutesGetting Started with SPDX preso  40 minutes (Gary O Neall and Jilayne)<ul><li><ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li><li>will include info on 2.0 that maybe relevant</li></ul></li><li></li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul> <ul><li>State</li></ul>  The SPDX Forum is hosted by the SPDX Workgroup of the Linux Foundation.  The SPDX Workgroup is an industry group that is developing a standard that enables companies to share information about open source licenses with suppliers and customers.  The SPDX Workgroup includes members from over 20 companies.     When April 6, 2012 9:00am to 3:00pm   Where The SPDX Forum will be hosted by Cisco  10 West Tasman Drive San Jose, California 95134 United States Building O First Floor Chess Meeting Room   Questions? Have questions about the SPDX Forum, please contact Kim Weins kim.weins@openlogic.com

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-06T17:09:45Z

Kweins:

SPDX Forum: Managing Open Source Licenses with Suppliers and Customers April 6, 2012San Jose, CAThe SPDX Forum is a one-day forum that will help companies learn how to streamline their open source license compliance processes.  The forum will bring together procurement, supply chain, legal and technical staff at companies that use open source technologies in their products to discuss challenges and best practices for complying with open source licenses across the software supply chain.  We will also discuss how the SPDX(TM) (Software Package Data Exchange) standard, developed by a workgroup of the Linux Foundation, can help companies to improve and streamline compliance efforts.Topics covered will include:State of Open Source ComplianceGet the latest on what's going on in the area of open source compliance.  Find out about the latest trends, legal actions and best practices.Discussion: The Challenges of OSS Compliance TodayParticipate in a discussion with your peers about the challenges you face in complying with open source licensesSPDX Primer:  What is SPDX and How Can it HelpFind out how the SPDX standard can help streamline compliance by creating a common format for sharing open source license information across the software supply chain -- from communities to companies to customers.  End User Panel: How Does SPDX Fit into a Corporate Compliance ProgramFind out more about how companies like Cisco, HP and WindRiver are looking to leverage SPDX in their corporate open source compliance efforts.<ul><li></li><li>Getting Started with SPDX preso  40 minutes (Gary O Neall and Jilayne)<ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li><li>will include info on 2.0 that maybe relevant</li></ul></li><li>Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>What's Next for SPDX - Interactive session - 30 minute<ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul></li><li>Invitation to paticipate in SPDX</li></ul> <ul><li>State</li></ul>  The SPDX Forum is hosted by the SPDX Workgroup of the Linux Foundation.  The SPDX Workgroup is an industry group that is developing a standard that enables companies to share information about open source licenses with suppliers and customers.  The SPDX Workgroup includes members from over 20 companies.     When April 6, 2012 9:00am to 3:00pm   Where The SPDX Forum will be hosted by Cisco  10 West Tasman Drive San Jose, California 95134 United States Building O First Floor Chess Meeting Room   Questions? Have questions about the SPDX Forum, please contact Kim Weins kim.weins@openlogic.com

Old/SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers

2012-03-06T16:27:12Z

Kweins:

Business Team/Minutes/2012-03-01

2012-03-01T21:19:23Z

Kweins:

Attendees<ul><li>Mark Gisi</li><li>Phil Odence</li><li>Kim Weins</li><li>Chuck Gaudreaux</li><li>Gary O Neall</li><li>Scott Lamons</li><li>Jilayne Lovejoy</li></ul>Agenda<ul><li>Web site</li><li>SPDX Forum</li><li>Collab Summit</li></ul>Web site<ul><li>Mark Gisi, Gary and Phil O are done</li><li>Kim in progress</li><li>Jilayne needs to get someone on legal team to help</li><li>Not sure re tech section</li></ul>SPDX Forum: April 6<ul><li>Registration</li><ul><li>LF has put up test registration page.  Kim and Phil to test.</li><li>Kim to add pages to the SPDX website with link to register</li><li>Once it's up, we'll notify people to register and invite others.</li></ul><li>Agenda Discussion</li><ul><li>We discussed the agenda based on feedback at the General Meeting.  See added notes below in the agenda.</li><li>We will capture feedback throughout, but will also discuss that feedback in the interactive "What's Next" session</li><li>We also have tenatative speakers listed below</li><li>Consensus is that we want to cover 2.0, but don't want to get done rathole of arguing about details of how to implement specific features in 2.0.  We will collect all feedback and feed that into the various workstreams</li></ul><li>Updated Agenda</li><ul><li>Stage Setting on OSS Compliance - 40 minutes</li><ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul><li>Discussion: The Challenges of OSS Compliance Today 30 mins</li><ul><li>Discussion at tables and then present info to the group</li></ul><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins</li><ul><li>Phil and Kate</li><li>will include info on what is in current spec and highlights of 2.0 and info on involving  OSS community</li></ul><li>End User Panel: How SPDX fits into a Corporate Compliance Program -- 1 hrs</li><ul><li>Cisco, HP, WindRiver, maybe MicroFocus (Tom Incorvia?)</li></ul><li>Getting Started with SPDX preso  40 minutes (Gary O Neall and Jilayne)</li><ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li><li>will include info on 2.0 that maybe relevant</li></ul><li>Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>What's Next for SPDX - Interactive session - 30 minute</li><ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul><li>Invitation to paticipate in SPDX</li></ul></ul> Collab Summit (April 3-5)<ul><li>We will have an SPDX overview session (presented by Mark Gisi) as part of the legal track on Wednesday.</li><ul><li>Legal track is being organized by Bradley Kuhn</li></ul><li>We may get an opportunity to be part of the keynote (still TBD)</li><li>We will have a room all day Thursday for our face-to-face meetings</li><li>We are trying to get a smaller room for the tech team for a half day on Wed for the tech team.  We're not sure if we will get this or not.  If we do, it will be at the same time as the Legal track on Wednesday -- so you would have to choose between the legal track or the tech team meeting.</li></ul>

Business Team/Minutes/2012-02-16

2012-02-23T16:11:48Z

Kweins:

Attendees<ul><li>Mark Gisi</li><li>Pierre Lapointe</li><li>Phil Odence</li><li>Kim Weins</li><li>Freddy Munoz</li><li>Chuck Gaudreaux</li><li>Gary O Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li><li>Steve Cropper</li></ul>Agenda<ul><li>Web site</li><li>End User Summit Meeting April 6</li><ul><li>Logistics</li><li>Cost</li><li>Agenda</li></ul></ul> Web site<ul><li>Mark Gisi is all done with his migrations for the website (usage and FAQ)</li><li>Gary has done -- it's good enough now, but he's</li><li>Phil O will work on his today</li><li>Jilayne and Kim in progress</li><li>Let's shoot for by next Wed 2/22 to get content done</li><li>Once content is done, web team can work on navigation</li><li>Goal is</li></ul>End User Meeting<ul><li> Friday April 6 in Bay Area</li><ul><li>Location: Cisco </li><li>9-3 (last bit is networking)</li><li>Up to 60 people</li></ul><li>Name</li><ul><li>SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers</li></ul><li>Agenda</li><ul><li>Stage Setting on OSS Compliance - 40 minutes</li><ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul><li>Discussion: The Challenges of OSS Compliance Today 30 mins</li><ul><li>Discussion at tables and then present info to the group</li></ul><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins</li><ul><li>SPDX team</li></ul><li>End User Panel: How SPDX fits into a Corporate Compliance Program -- 1 hrs</li><ul><li>Cisco, HP, WindRiver</li></ul><li>Getting Started with SPDX preso  40 minutes</li><ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li></ul><li>Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>What's Next for SPDX - Interactive session - 30 minute</li><ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul><li>Invitation to paticipate in SPDX</li></ul><li>Target Invitees</li><ul><li>People involved with OSS Compliance activities</li><ul><li>compliance, procurement/supply chain, legal,</li></ul><li>Embedded sw or ISVs</li><li>Include smaller software suppliers, not just bigger people</li></ul><li>Invitations</li><ul><li>LF lists  (mailing ahead of time, invite at conference)</li><li>Jim Zemlin (reach out to LF members)</li><li>Smaller people thru VCs (Gary)</li><li>Mark Radcliffe</li><li>SPDX members - invite suppliers and or customers</li><li>Bar associations</li></ul><li>Could we webcast?  Might be a cost? - Steve will check into it</li></ul>

Business Team/Minutes/2012-02-16

2012-02-16T17:50:16Z

Kweins:

Attendees<ul><li>Mark Gisi</li><li>Pierre Lapointe</li><li>Phil Odence</li><li>Kim Weins</li><li>Freddy Munoc</li><li>Chuck Gaudreaux</li><li>Gary O Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li><li>Steve Cropper</li></ul>Agenda<ul><li>Web site</li><li>End User Summit Meeting April 6</li><ul><li>Logistics</li><li>Cost</li><li>Agenda</li></ul></ul> Web site<ul><li>Mark Gisi is all done with his migrations for the website (usage and FAQ)</li><li>Gary has done -- it's good enough now, but he's</li><li>Phil O will work on his today</li><li>Jilayne and Kim in progress</li><li>Let's shoot for by next Wed 2/22 to get content done</li><li>Once content is done, web team can work on navigation</li><li>Goal is</li></ul>End User Meeting<ul><li> Friday April 6 in Bay Area</li><ul><li>Location: Cisco </li><li>9-3 (last bit is networking)</li><li>Up to 60 people</li></ul><li>Name</li><ul><li>SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers</li></ul><li>Agenda</li><ul><li>Stage Setting on OSS Compliance - 40 minutes</li><ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul><li>Discussion: The Challenges of OSS Compliance Today 30 mins</li><ul><li>Discussion at tables and then present info to the group</li></ul><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins</li><ul><li>SPDX team</li></ul><li>End User Panel: How SPDX fits into a Corporate Compliance Program -- 1 hrs</li><ul><li>Cisco, HP, WindRiver</li></ul><li>Getting Started with SPDX preso  40 minutes</li><ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li></ul><li>Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>What's Next for SPDX - Interactive session - 30 minute</li><ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul><li>Invitation to paticipate in SPDX</li></ul><li>Target Invitees</li><ul><li>People involved with OSS Compliance activities</li><ul><li>compliance, procurement/supply chain, legal,</li></ul><li>Embedded sw or ISVs</li><li>Include smaller software suppliers, not just bigger people</li></ul><li>Invitations</li><ul><li>LF lists  (mailing ahead of time, invite at conference)</li><li>Jim Zemlin (reach out to LF members)</li><li>Smaller people thru VCs (Gary)</li><li>Mark Radcliffe</li><li>SPDX members - invite suppliers and or customers</li></ul><li>Could we webcast?  Might be a cost? - Steve will check into it</li></ul>

Business Team/Minutes/2012-02-16

2012-02-16T16:54:47Z

Kweins:

Business Team/Minutes/2012-02-16

2012-02-16T16:52:17Z

Kweins:

Attendees<ul><li>Mark Gisi</li><li>Pierre Lapointe</li><li>Phil Odence</li><li>Kim Weins</li><li>Freddy Munoc</li><li>Chuck Gaudreaux</li><li>Gary O Neall</li><li>Scott Lamons</li><li>Kirsten Newcomer</li><li>Steve Cropper</li></ul>Agenda<ul><li>Web site</li><li>End User Summit Meeting April 6</li><ul><li>Logistics</li><li>Cost</li><li>Agenda</li></ul></ul> Web site<ul><li>Mark Gisi is all done with his migrations for the website (usage and FAQ)</li><li>Gary has done -- it's good enough now, but he's</li><li>Phil O will work on his today</li><li>Jilayne and Kim in progress</li><li>Let's shoot for by next Wed 2/22 to get content done</li><li>Once content is done, web team can work on navigation</li><li>Goal is</li></ul>End User Meeting<ul><li> Friday April 6 in Bay Area</li><ul><li>Location: Cisco  </li><li>9-3 (last bit is networking)</li><li>Up to 60 people</li></ul><li>Name</li><ul><li>SPDX Forum: Managing Open Source Software Licenses with Suppliers and Customers</li></ul><li>Agenda</li><ul><li>Stage Setting on OSS Compliance - 40 minutes</li><ul><li>Stats, quotes, what are companies doing today, define the problem - Mark Radcliffe</li></ul><li>Discussion: The Challenges of OSS Compliance Today 30 mins</li><ul><li>Discussion at tables and then present info to the group</li></ul><li>SPDX Primer:  What is SPDX and How Can it Help - 40 mins</li><ul><li>SPDX team</li></ul><li>End User Panel: How SPDX fits into a Corporate Compliance Program -- 1 hrs</li><ul><li>Cisco, HP, WindRiver</li></ul><li>Getting Started with SPDX preso  40 minutes</li><ul><li>SPDX structure</li><li>Spreadsheet</li><li>License List</li><li>SPDX Tooling</li></ul><li>Discussion:  Challenges and Approaches to Implementing SPDX - 30 minutes</li><li>What's Next for SPDX - Interactive session - 30 minute</li><ul><li>Preso on what's on the table and hot issues</li><li>Q&A /Discussion</li></ul><li>Invitation to paticipate in SPDX</li></ul><li>Target Invitees</li><ul><li>People involved with OSS Compliance activities</li><ul><li>compliance, procurement/supply chain, legal, </li></ul><li>Embedded sw or ISVs</li><li>Include smaller software suppliers, not just bigger people</li></ul><li>Invitations</li><ul><li>LF lists  (mailing ahead of time, invite at conference)</li><li>Jim Zemlin (reach out to LF members)</li><li>Smaller people thru VCs (Gary)</li><li>Mark Radcliffe</li><li>SPDX members - invite suppliers and or customers</li></ul><li>Could we webcast?  Might be a cost? - Steve will check into it</li></ul>

Business Team/Minutes/2012-02-16

2012-02-16T16:29:31Z

Kweins:

Business Team/Minutes/2012-02-16

2012-02-16T16:01:43Z

Kweins:

Attendees<ul><li>Mark Gisi</li><li>Pierre Lapointe</li><li>Phil Odence</li><li>Kim Weins</li><li>Freddy Munoc</li><li>Chuck Gaudreaux</li><li>Gary O Neall</li></ul>Agenda<ul><li>Web site</li><li>Meeting April 6</li><ul><li>Logistics</li><li>Cost</li></ul></ul> End User Meeting<ul><li>New idea for an "end user" focused meeting in the Bay Area to socialize ideas of SPDX</li><li>Possibly April 5 or 6 in Bay Area, possibly 9-2</li><li>Stage Setting on OSS Compliance - Mark R</li><li>The Challenges Today - Discussion</li><li>SPDX Primer</li><li>One or two end users talk (Cisco, HP, WindRiver)</li><li>SPDX Tooling</li><li>The New OSS Compliance Best Practice - Discusssion</li></ul>

Business Team/Minutes/2012-02-16

2012-02-16T15:57:36Z

Kweins:

Attendees<ul><li></li></ul>Agenda<ul><li>Web site</li><li>Meeting April 6</li><li></li></ul>

Business Team/Minutes/2012-02-02

2012-02-02T17:00:28Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Chuck Gaudreau</li><li>Pierre Lapointe</li><li>Jilayne Lovejoy</li><li>Steve Cropper</li><li>Scott Lamons</li><li>Mark Gisi</li></ul>Agenda<ul><li>Web Site Content Cutover</li><li>EclipseCon BOF</li><li>Software Supply Chain Summit - Date and Place</li><li>Next Steps - License List process</li><li>Web Resources</li><li>SPDX 2.0 compatibility</li><li>Enterprise Adoption issues</li></ul>Notes<ul><li>Eclipse Con BOF</li><ul><li>March 28 7pm</li><li>In DC area</li><li>On the schedule and organized</li><li>So far, Mashad and Guillaume will be there</li><li>How can it be promoted? - Kim to ask LF if they can promote in their newletter</li></ul><li>Web site</li><ul><li>Instructions went out</li><li>Discussed the various types of page and what type to use in various cicrumstances</li><li>Should our mailing lists all be forums?  We had a question about whether a forum would force us to log back in to respond to an email.  That could be a bit of a pain.</li><li>We could also think about using forums for the FAQ</li></ul></ul><ul><li>Software Supply Chain Summit</li><ul><li>This would be a 1 day meeting in person with people involved in the software supply chain to discuss SPDX and OSS compliance in the supply chain</li><ul><li>Cisco is willing to host at their facilities in San Jose</li><li>Need to figure out how many people - 30-40</li><li></li></ul><li>Agenda</li><ul><li>Goals</li><ul><li>Should be more education (101)</li><li>How to get on board & provide feedback</li></ul><li>State of OSS Compliance Today</li><li>Intro to SPDX</li><li>Presentations by end users (at least 2, or a panel)</li><li>License List</li><li>Tools</li><li>What's going on with the spec now</li><li>Getting involved</li><li>Discussion</li></ul><li>Who should we target to company?</li><ul><li>Maybe 30-40 attendees</li><li>End user companies</li><li>Supply chain/Procurement people working with software for 3rd parties and vendors, Legal people, open source compliance people or OSRB, part of R&D team in similar orgs. Want some smaller software suppliers.</li></ul><li>Targeting Friday April 6 (day after LF COllab Summit) - Steve to check on date and if we can get a room</li><li>Will need a lunch,breakfast and maybe networking snack</li><li>Spread the word to the tech team</li></ul><li>License List Process</li><ul><li>Volunteers?   Possibly Gary & Jilayne</li></ul></ul>

Business Team/Minutes/2012-02-02

2012-02-02T16:02:12Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Chuck Gaudreau</li><li>Pierre Lapointe</li><li>Jilayne Lovejoy</li></ul>Agenda<ul><li>Web Site Content Cutover</li><li>EclipseCon BOF</li><li>Software Supply Chain Summit - Date and Place</li><li>Next Steps - License List process</li><li>Web Resources</li><li>SPDX 2.0 compatibility</li><li>Enterprise Adoption issues</li></ul>Notes<ul><li></li><li>Software Supply Chain Summit</li><ul><li>This would be a 1 day meeting in person with people involved in the software supply chain to discuss SPDX and OSS compliance in the supply chain</li><li>Targeting potentially April 6 (day after LF COllab Summit)</li><li>To be held in South Bay (possible at DLA or Cisco or HP facilities)</li><li>Topics would be about OSS compliance in the supply chain issues, SPDX issues and discussion</li><li>We want it to be not just presentation, but also discussion</li><li>We would target maybe 20 or so people from enterprises that use/distribute OSS</li><li>How to get people there</li><ul><li>Current SPDX members to invite people</li><li>Mark Radcliffe will help market</li><li>Ask LF (Jim Z) to help</li></ul><li>Kim to talk to LF to coordinate so we can finalize date/time/place</li></ul><li>License List Process</li><li>Process for companies to adopt </li><ul><li>We discussed how we move forward with company adoption. </li><li>Scott Lamons talked through their process</li><ul><li>Can start with procurement team to ask suppliers to provide SPDX</li><li>Will need to educate procurement team on SPDX (what/why)</li><li>Will need places on website to point suppliers to</li><li>HP has a standard spreadsheet format for proposal tracking of all OSS requests -- but it's not the SPDX format.</li><li>HP would need to change to SPDX format</li><ul><li>HP Would need to be able to have extra fields that are company specific and have the tools ignore/add those.</li></ul><li>They Will need tools to help them</li><ul><li>Scott's idea is that you feed it software repositories to scan for licenses and then you can input the SPDX specific fields and create SPDX files</li><li>We discussed the fact that ultimately you want to tie all of these pieces together, but in the short term, suppliers could use their current processes for figuring out what OSS they are using and then use the exisitng tools to convert to SPDX format.</li></ul><li>HP Could also ask their developers that are making internal requests to provide SPDX</li></ul></ul></ul>

Business Team/Minutes/2012-02-02

2012-02-02T15:55:33Z

Kweins:

General Meeting/Minutes/2012-01-12

2012-01-25T22:07:09Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Gary O'Neall</li><li>Michael Herzog</li><li>Jilayne Lovejoy</li><li>Mark Gisi</li><li>Brandon Robinson</li><li>Steve Cropper</li></ul>Legal Update from Jilayne<ul><li>Talked about Legal To-Do's</li><li>Legal team is working on templatizing -- they have a  draft of guidelines.  There are some outstanding issues</li><li>Need to get going on the license approval process.  Biz team is owning the process but legal will be participants as well.</li><li>Jilayne and Adam finalized the last edits on the preamble for the data license.  Kim to send to community people for feedback</li><li>Mark Gisi has updated "rationale doc" that explains why we selected data license.  That doc is not yet on website, but Mark to upload</li></ul>Tech Team Update from Gary<ul><li>Work of tech team is focused on the 1.1 spec.</li><li>They did a review of the draft 1.1 spec and there were a few follow up items.</li><li>Plan is to resolve those issues and update the RDF and the tools by the end of Q1.</li><li>3 new tools are available that</li><ul><li>Convert between SPDX Tag and RDF format (both ways)</li><li>Convert from SPDX to HTML</li></ul><li>1.1 Features are:</li><ul><li>Updated data license to CC0</li><li>Fix typos</li><li>Fix the verification codes</li><li>Add tracking of suppliers</li></ul><li>Tech team is also starting on the hierarchical/embedded design for 2.0.</li></ul> Biz team update from Kim<ul><li>Website conversion is almost ready to start</li><ul><li>Web team had a meeting earlier in the week to review the work that is done</li><li>Steve Cropper to schedule a web training for next week to show people how to convert content</li></ul><li>Discussed EclipseCon</li><ul><li>Protecode is taking the lead to organize a BOF</li></ul><li>Discussed Software Supply Chain Summit idea</li><ul><li>The idea is to have an in person 1 day meeting in Bay Area</li><li>Target date is Fri April 6, right after Collab Summit</li><li>Invite people from companies in the software supply chain -- including non-SPDX participants</li><li>SPDX people could also invite supplychain partners</li><li>We want to start to socialize and spread SPDX</li><li>Agenda would need to be developed, but contect would include SPDX Basics, End User talks, License info, tools as well as discussions</li><li>Steve Cropper said Cisco may be willing to host.  HP may as well.</li><li>Kim to follow up with LF and let them know.</li></ul></ul>

General Meeting/Minutes/2012-01-12

2012-01-25T21:45:47Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Gary O'Neall</li><li>Michael Herzog</li><li>Jilayne Lovejoy</li><li>Mark Gisi</li><li>Brandon Robinson</li><li>Steve Cropper</li></ul>Legal Update from Jilayne<ul><li>Talked about Legal To-Do's</li><li>Legal team is working on templatizing -- they have a  draft of guidelines.  There are some outstanding issues</li><li>Need to get going on the license approval process.  Biz team is owning the process but legal will be participants as well.</li><li>Jilayne and Adam finalized the last edits on the preamble for the data license.  Kim to send to community people for feedback</li><li>Mark Gisi has updated "rationale doc" that explains why we selected data license.  That doc is not yet on website, but Mark to upload</li></ul>Tech Team Update from Gary<ul><li>Work of tech team is focused on the 1.1 spec.</li><li>They did a review of the draft 1.1 spec and there were a few follow up items.</li><li>Plan is to resolve those issues and update the RDF and the tools by the end of Q1.</li><li>3 new tools are available that</li><ul><li>Convert between SPDX Tag and RDF format (both ways)</li><li>Convert from SPDX to HTML</li></ul><li>1.1 Features are:</li><ul><li>Updated data license to CC0</li><li>Fix typos</li><li>Fix the verification codes</li><li>Add tracking of suppliers</li></ul><li>Tech team is also starting on the hierarchical/embedded design for 2.0.</li></ul> Biz team update from Kim<ul><li>Website conversion is almost ready to start</li><ul><li>Web team had a meeting earlier in the week to review the work that is done</li><li>Steve Cropper to schedule a web training for next week to show people how to convert content</li></ul><li>Discussed EclipseCon</li><ul><li>Protecode is taking the lead to organize a BOF</li></ul><li>Discussed Software Supply Chain Summit idea</li><ul><li>The idea is to have an in person 1 day meeting</li><li>Invite people from companies in the software supply chain -- including non-SPDX participants</li><li>We want to start to socialize and spread SPDX</li></ul></ul>

General Meeting/Minutes/2012-01-12

2012-01-25T21:16:10Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Gary O'Neall</li><li>Michael Herzog</li><li>Jilayne Lovejoy</li><li>Mark Gisi</li><li>Brandon Robinson</li><li>Steve Cropper</li></ul>Legal Update from Jilayne<ul><li>Talked about Legal To-Do's</li><li>Legal team is working on templatizing -- they have a  draft of guidelines.  There are some outstanding issues</li><li>Need to get going on the license approval process.  Biz team is owning the process but legal will be participants as well.</li><li>Jilayne and Adam finalized the last edits on the preamble for the data license.  Kim to send to community people for feedback</li><li>Mark Gisi has updated "rationale doc" that explains why we selected data license.  That doc is not yet on website, but Mark to upload</li></ul>Tech Team Update from Gary<ul><li>Work of tech team is focused on the 1.1 spec.</li><li>They did a review of the draft 1.1 spec and there were a few follow up items.</li><li>Plan is to resolve those issues and update the RDF and the tools by the end of Q1.</li><li>3 new tools are available that</li><ul><li>Convert between SPDX Tag and RDF format (both ways)</li><li>Convert from SPDX to HTML</li></ul><li>1.1 Features are:</li><ul><li>Updated data license to CC0</li><li>Fix typos</li><li>Fix the verification codes</li><li>Add tracking of suppliers</li></ul><li>Tech team is also starting on the hierarchical/embedded design for 2.0.</li></ul> Biz team update from Kim<ul><li>Website conversion is almost ready to start</li><ul><li>Web team had a meeting earlier in the week to review the work that is done</li><li>Steve Cropper to schedule a web training for next week to show people how to convert content</li></ul><li>Discussed EclipseCon</li><ul><li>Protecode is taking the lead to organize a BOF</li></ul><li>Discussed Software Supply Chain Summit idea</li><ul><li>The idea is to have an in person 1 day meeting</li><li>Invite people from companies in the software supply chain -- including non-SPDX participants</li><li>We want to start to socialize and spread SPDX</li></ul></ul>

General Meeting/Minutes/2012-01-12

2012-01-25T21:14:04Z

Kweins:

General Meeting/Minutes/2012-01-12

2012-01-25T21:07:59Z

Kweins:

Business Team/Minutes/2012-01-19

2012-01-19T17:28:44Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Chuck Gaudreau</li><li>Gary O'Neill</li><li>Scott Lamons</li><li>Jilayne Lovejoy</li></ul>Agenda<ul><li>Web Site</li><li>Update on CC0 "license" feedback</li><li>EclipseCon BOF</li><li>Software Supply Chain Summit</li><li>License List Process</li><li>Enterprise Adoption issues</li></ul>Notes<ul><li>Web site training</li><ul><li>Steve Cropper and Pierre held a training session on moving stuff to the new site.</li><li>Kim took notes and will turn that into a how-to document and will send to everyone involved</li></ul><li>Update on CC0 license</li><ul><li>Kim sent email to Ian Skerrett at Eclipse, Robin Johnson at Gentoo, Spot at Fedora about the change in the data license from Public Data License to CC0</li><li>So far, I've hear back from Robin at Gentoo that he was happy about that.  HIs email note said:</li><ul><li>Looks good, 100% behind CC-0. Tom: I meant to poke you re our idea of altering license naming in the distros to match SPDX license identifiers. We've been working on classifying all the licenses in Gentoo: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/profiles/license_groups?revision=1.102&view=markup (the above only covers 252 out of the 614 licenses presently in Gentoo).</li></ul><li>I sent a follow up to Robin asking if he would work with us to get the license list expanded to cover his 252 (or possibly 614) licenses in Gentoo.</li></ul><li>Eclipse BOF</li><ul><li>Chuck and Mahshad from Protecode are working to organize BOF at EclipseCon</li><li>I suggested that they should plan for no more than 20 people. </li></ul><li>Software Supply Chain Summit</li><ul><li>This would be a 1 day meeting in person with people involved in the software supply chain to discuss SPDX and OSS compliance in the supply chain</li><li>Targeting potentially April 6 (day after LF COllab Summit)</li><li>To be held in South Bay (possible at DLA or Cisco or HP facilities)</li><li>Topics would be about OSS compliance in the supply chain issues, SPDX issues and discussion</li><li>We want it to be not just presentation, but also discussion</li><li>We would target maybe 20 or so people from enterprises that use/distribute OSS</li><li>How to get people there</li><ul><li>Current SPDX members to invite people</li><li>Mark Radcliffe will help market</li><li>Ask LF (Jim Z) to help</li></ul><li>Kim to talk to LF to coordinate so we can finalize date/time/place</li></ul><li>License List Process</li><ul><li>We reviewed our previous notes for adding to license list and added a few more ideas and thoughts</li><li>Details at  http://www.spdx.org/wiki/process-adding-license-list-draft</li><li>In general it looks pretty good, but we also need legal team to review and give feedback</li><li>Our goal is to have something in place by end of Q2, so we will start taking these notes and working it into a more formal description and a "to do" list of the pieces we need to put into place to make it happen.</li></ul><li>Process for companies to adopt </li><ul><li>We discussed how we move forward with company adoption. </li><li>Scott Lamons talked through their process</li><ul><li>Can start with procurement team to ask suppliers to provide SPDX</li><li>Will need to educate procurement team on SPDX (what/why)</li><li>Will need places on website to point suppliers to</li><li>HP has a standard spreadsheet format for proposal tracking of all OSS requests -- but it's not the SPDX format.</li><li>HP would need to change to SPDX format</li><ul><li>HP Would need to be able to have extra fields that are company specific and have the tools ignore/add those.</li></ul><li>They Will need tools to help them</li><ul><li>Scott's idea is that you feed it software repositories to scan for licenses and then you can input the SPDX specific fields and create SPDX files</li><li>We discussed the fact that ultimately you want to tie all of these pieces together, but in the short term, suppliers could use their current processes for figuring out what OSS they are using and then use the exisitng tools to convert to SPDX format.</li></ul><li>HP Could also ask their developers that are making internal requests to provide SPDX</li></ul></ul></ul>

Business Team/Minutes/2012-01-19

2012-01-19T17:27:38Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Chuck Gaudreau</li><li>Gary O'Neill</li><li>Scott Lamons</li><li>Jilayne Lovejoy</li></ul>Agenda<ul><li>Web Site</li><li>Update on CC0 "license" feedback</li><li>EclipseCon BOF</li><li>Software Supply Chain Summit</li><li>License List Process</li><li></li></ul>Notes<ul><li>Web site training</li><ul><li>Steve Cropper and Pierre held a training session on moving stuff to the new site.</li><li>Kim took notes and will turn that into a how-to document and will send to everyone involved</li></ul><li>Update on CC0 license</li><ul><li>Kim sent email to Ian Skerrett at Eclipse, Robin Johnson at Gentoo, Spot at Fedora about the change in the data license from Public Data License to CC0</li><li>So far, I've hear back from Robin at Gentoo that he was happy about that.  HIs email note said:</li><ul><li>Looks good, 100% behind CC-0. Tom: I meant to poke you re our idea of altering license naming in the distros to match SPDX license identifiers. We've been working on classifying all the licenses in Gentoo: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/profiles/license_groups?revision=1.102&view=markup (the above only covers 252 out of the 614 licenses presently in Gentoo).</li></ul><li>I sent a follow up to Robin asking if he would work with us to get the license list expanded to cover his 252 (or possibly 614) licenses in Gentoo.</li></ul><li>Eclipse BOF</li><ul><li>Chuck and Mahshad from Protecode are working to organize BOF at EclipseCon</li><li>I suggested that they should plan for no more than 20 people. </li></ul><li>Software Supply Chain Summit</li><ul><li>This would be a 1 day meeting in person with people involved in the software supply chain to discuss SPDX and OSS compliance in the supply chain</li><li>Targeting potentially April 6 (day after LF COllab Summit)</li><li>To be held in South Bay (possible at DLA or Cisco or HP facilities)</li><li>Topics would be about OSS compliance in the supply chain issues, SPDX issues and discussion</li><li>We want it to be not just presentation, but also discussion</li><li>We would target maybe 20 or so people from enterprises that use/distribute OSS</li><li>How to get people there</li><ul><li>Current SPDX members to invite people</li><li>Mark Radcliffe will help market</li><li>Ask LF (Jim Z) to help</li></ul><li>Kim to talk to LF to coordinate so we can finalize date/time/place</li></ul><li>License List Process</li><ul><li>We reviewed our previous notes for adding to license list and added a few more ideas and thoughts</li><li>In general it looks pretty good, but we also need legal team to review and give feedback</li><li>Our goal is to have something in place by end of Q2, so we will start taking these notes and working it into a more formal description and a "to do" list of the pieces we need to put into place to make it happen.</li></ul><li>Process for companies to adopt </li><ul><li>We discussed how we move forward with company adoption.  </li><li>Scott Lamons talked through their process</li><ul><li>Can start with procurement team to ask suppliers to provide SPDX</li><li>Will need to educate procurement team on SPDX (what/why)</li><li>Will need places on website to point suppliers to</li><li>HP has a standard spreadsheet format for proposal tracking of all OSS requests -- but it's not the SPDX format.</li><li>HP would need to change to SPDX format</li><ul><li>HP Would need to be able to have extra fields that are company specific and have the tools ignore/add those.</li></ul><li>They Will need tools to help them</li><ul><li>Scott's idea is that you feed it software repositories to scan for licenses and then you can input the SPDX specific fields and create SPDX files</li><li>We discussed the fact that ultimately you want to tie all of these pieces together, but in the short term, suppliers could use their current processes for figuring out what OSS they are using and then use the exisitng tools to convert to SPDX format.</li></ul><li>HP Could also ask their developers that are making internal requests to provide SPDX</li></ul></ul></ul>

Business Team/Minutes/2012-01-19

2012-01-19T17:21:57Z

Kweins:

Attendees<ul><li>Kim Weins</li><li>Chuck Gaudreau</li><li>Gary O'Neill</li><li>Scott Lamons</li><li>Jilayne Lovejoy</li></ul>Agenda<ul><li>Web Site</li><li>Update on CC0 "license" feedback</li><li>EclipseCon BOF</li><li>Software Supply Chain Summit</li><li>License List Process</li><li></li></ul>Notes<ul><li>Web site training</li><ul><li>Steve Cropper and Pierre held a training session on moving stuff to the new site.</li><li>Kim took notes and will turn that into a how-to document and will send to everyone involved</li></ul><li>Update on CC0 license</li><ul><li>Kim sent email to Ian Skerrett at Eclipse, Robin Johnson at Gentoo, Spot at Fedora about the change in the data license from Public Data License to CC0</li><li>So far, I've hear back from Robin at Gentoo that he was happy about that.  HIs email note said:</li><ul><li>Looks good, 100% behind CC-0. Tom: I meant to poke you re our idea of altering license naming in the distros to match SPDX license identifiers. We've been working on classifying all the licenses in Gentoo: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/profiles/license_groups?revision=1.102&view=markup (the above only covers 252 out of the 614 licenses presently in Gentoo).</li></ul><li>I sent a follow up to Robin asking if he would work with us to get the license list expanded to cover his 252 (or possibly 614) licenses in Gentoo.</li></ul><li>Eclipse BOF</li><ul><li>Chuck and Mahshad from Protecode are working to organize BOF at EclipseCon</li><li>I suggested that they should plan for no more than 20 people. </li></ul><li>Software Supply Chain Summit</li><ul><li>This would be a 1 day meeting in person with people involved in the software supply chain to discuss SPDX and OSS compliance in the supply chain</li><li>Targeting potentially April 6 (day after LF COllab Summit)</li><li>To be held in South Bay (possible at DLA or Cisco or HP facilities)</li><li>Topics would be about OSS compliance in the supply chain issues, SPDX issues and discussion</li><li>We want it to be not just presentation, but also discussion</li><li>We would target maybe 20 or so people from enterprises that use/distribute OSS</li><li>How to get people there</li><ul><li>Current SPDX members to invite people</li><li>Mark Radcliffe will help market</li><li>Ask LF (Jim Z) to help</li></ul><li>Kim to talk to LF to coordinate so we can finalize date/time/place</li></ul><li>Process for companies to adopt - Per Scott L</li><ul><li>Can start with procurement team to ask suppliers to provide it</li><li>Will need to educate procurement team</li><li>Will need places on website to point suppliers to</li><li>They have a standard spreadsheet format for proposal tracking of all OSS requests -- but it's not the SPDX format</li><ul><li>WOuld need to be able to have extra fields that are company specific and have the tools ignore/add those.</li></ul><li>Will need tools to help them</li><ul><li>Idea is that you feed it software repositories to scan for licenses and then you can input the SPDX specific fields and create SPDX files</li></ul><li>Could also ask their developers that are making internal requests to provide SPDX</li></ul></ul>

Business Team/Minutes/2012-01-19

2012-01-19T17:02:49Z

Kweins:

Business Team/Minutes/2012-01-19

2012-01-19T16:52:17Z

Kweins:

Business Team/Process for Adding to License List Draft

2012-01-19T16:48:39Z

Kweins:

<ul><li>Process<ul><li>First validation/vetting for complete/correct info - contact person who submitted</li><li>Decision making by group<ul><li>Allow comments in a timeline</li><li>Start with an open ended time</li><li>Have business team make decision initially until we see what the volume is<ul><li>Shoot for doing this first year unless it's getting out of hand</li></ul></li><li>Way to batch it - handle at biz team meetings</li><li>Can have some where we decide to "defer" for now.</li><li>Business team will decide -- likely based on majority vote for people that attended the meeting (at least 5 people and 1 legal)</li><li>Publish the ones we will vote on 2 weeks in advance to full list.  Discussion/comments on biz list.<ul><li>Set up a separate wiki page to keep the list tracked of what we are voting on when</li></ul></li></ul></li><li>Later -- Have a more formal committee that makes a decision - 5-7 people<ul><li>Should have 2 legal spots on community</li><li>Might want at least one community spot</li><li>Nominations (including self nominations) make clear the requirements</li><li>Way to adjust if someone is not participating</li></ul></li><li>Assignment of standard name<ul><li>Have requester/"pilot" propose a standard name (short and long) based on our rules</li><li>Review and agree on that when we vote</li></ul></li><li>Data entered into repo and templatizing is done<ul><li>Templatizing should be automated process</li></ul></li><li>Review/QA of the data in the repo<ul><li>Have a legal person look to make sure it's OK and nothing is broken</li></ul></li></ul></li><li>Suggested Criteria<ul><li>Center of gravity is OSS license but will consider freeware or other licenses that are widely encountered.  For example would consider Sun Binary Licenses.  Things that share many/all of OSI attributes - but may have additional requirements</li><li>Not for purely commercial licenses (ex EULA, or Oracle license)</li><li>License must be publicly accessible</li><li>License that is seen across multiple projects or on a heavily used project</li><li>License that will be popular in future (eg new version of GPL, Apache)</li></ul></li><li>Need a statement that we don't necessarily consider all these licenses to be open source - just trying to facilitate a way to refer to them.  Check how Fedora does this (talk to Spot)</li><li>Who does stuff<ul><li>Could have one person "pilot" assigned to a license and have them follow it through process  all the way to finish to put in repo</li><li>List of volunteers willing to be pilots and rotate through that list -- show list on site</li><li>Assign the Bugzilla issue to someone (manually initially) -- Kim will assign names manually</li><li>Allow people to submit directly to Bugzilla or via a form on the site</li><ul><li>To use Bugzilla, you have to register, so that might filter people out, so if we had a form on the site that would work.  That form could send an email and then someone can manually enter in the bug database</li></ul><li>Automatically send comments to mailing list when bugzilla form is updated</li></ul></li><li>For bulk groups of licenses we could put them thru in bulk -- and have a bit of a different process</li><li>Need to discuss how we will turn the license list spreadsheet into the web pages.  Right now it's a multi-person process and we will need to streamline.</li><li>Timeframe<ul><li>Will need to set expectations for turnaround time</li><li>Likely a 2-3 month period (rough target -- not a guarantee)<ul><li>2 weeks -- Time to vet</li><li>2 weeks to comment (min)</li><li>2 weeks in advance to schedule a vote</li><li>2-4 weeks to enter in repo and QA after approval</li></ul></li></ul></li></ul>

Business Team/Process for Adding to License List Draft

2012-01-19T16:47:13Z

Kweins:

Business Team/Process for Adding to License List Draft

2012-01-19T16:46:15Z

Kweins: