GSOC/GSOC ProjectIdeas - Revision history

Swinslow: Add Golang RDF Saver project

2022-03-31T17:36:57Z

Add Golang RDF Saver project

2022-03-01T16:50:35Z

‎Ideas for 2022 Projects

2022-02-28T15:49:04Z

‎Description

2022-02-28T15:48:17Z

‎Ideas for 2022 Projects

2022-02-28T15:39:54Z

‎SBOM combiner

2022-02-28T14:44:58Z

‎Private license management system

2022-02-28T14:43:28Z

‎Update of Python SPDX libraries to handle latest spec

2022-02-28T14:40:05Z

‎Ideas for 2022 Projects

2022-02-23T15:04:34Z

‎Ideas for 2022 Projects

2022-02-15T17:15:31Z

‎SBOM Conformance Checker

← Older revision		Revision as of 17:36, 31 March 2022
Line 151:		Line 151:
	=== Mentors ===		=== Mentors ===
	TBD		TBD
		+
		+	== SPDX Golang RDF Saver ==
		+	=== Description ===
		+	SPDX already has a Golang library to save RDF triples into a file/string
		+	using the gordf project: https://github.com/spdx/gordf
		+
		+	The aim of this GSoC project would be to write an adapter in the
		+	SPDX Golang Tools (the tools-golang repository at https://github.com/spdx/tools-golang) that
		+	would take an SPDX Document struct (see https://github.com/spdx/tools-golang/blob/main/spdx/document.go) as
		+	an input, and serialize it and its child elements into RDF triples to be consumed by the
		+	aforementioned gordf rdf-writer.
		+	=== Technologies ===
		+	Golang; RDF
		+	=== Duration ===
		+	This will be a short (175 hours) project. If the project requires less than 175 hours, remaining time can be spent on
		+	additional improvements to the Golang tools.
		+	=== Mentors ===
		+	Rishabh Bhatnagar; Steve Winslow as secondary / backup

@@ Line 111: / Line 111: @@
 == Update of Java SPDX libraries to handle latest spec ==
 Since the specification has evolved
 and a newer version is expected to be published
@@ Line 116: / Line 119: @@
 it would be useful to have the standard Java libraries
 capable of handling the latest spec.
 === Technologies ===
 Java; see https://github.com/spdx/Spdx-Java-Library
@@ Line 124: / Line 132: @@
 == Update of Go SPDX libraries to handle latest spec ==
 Since the specification has evolved
 and a newer version is expected to be published
@@ Line 129: / Line 140: @@
 it would be useful to have the standard Go libraries
 capable of handling the latest spec.
 === Technologies ===
 Go; see https://github.com/spdx/tools-golang

@@ Line 47: / Line 47: @@
 checks whether an SBOM (in SPDX format)
 conforms to NTIA's minimum elements guidance.
-== Description ==
+=== Description ===
 The SPDX Specification defines a number of fields (elements) that may appear in an SBOM (Software Bill of Materials).
 Not all of them are mandatory, however, so SBOMs in SPDX format can vary greatly.

@@ Line 46: / Line 46: @@
 The goal of this project is to create a simple tool that
 checks whether an SBOM (in SPDX format)
-conforms to the minimum elements guidance from NTIA for an SBOM
+conforms to NTIA's minimum elements guidance.
-(https://www.ntia.doc.gov/files/ntia/publications/sbom_minimum_elements_report.pdf).
+== Description ==
 === Technologies ===
 Python
@@ Line 57: / Line 68: @@
 === Mentors ===
 Dick Brooks, Kate Stewart
 == Update of Java SPDX libraries to handle latest spec ==
@@ Line 106: / Line 158: @@
 TBD
 == More to come... ==

@@ Line 133: / Line 133: @@
 The project will result in a simple command-line tool that will be able to “combine” information from a number of SBOMs into a comprehensive SBOM that includes all the information of the provided ones.
 An actual use case would be the generation of an SBOM for an actual software delivery that is comprised by a number of components, each one of which has its own correct SBOM.
 === Technologies ===
 Python (preferably); or Go.
@@ Line 138: / Line 145: @@
 This will be a short (175 hours) project.
 === Mentors ===
-TBD
+Rose Judge; others TBD
 == More to come... ==

@@ Line 108: / Line 108: @@
 == Private license management system ==
 A web-based system for managing license texts; similar to the SPDX License List but oriented towards other private collections of licenses.
-=== Technologies ===
+=== Description ===
-Python (any framework) for the back-end; JavaScript (any framework) for the minimal front-end.
-=== Duration ===
-This can be either a short (175 hours) project, implementing only the basic functionality;
-or a long (350 hours) one, extending the functionality and automation.
-=== Mentors ===
-Alexios Zavras; more TBD
-=== More Information ===
 The goal of the project would be to create a simple web application
 for people to upload license texts
@@ Line 129: / Line 122: @@
 If the SPDX project has already advanced in these definitions,
 this project will obviously implement the decisions taken.
 == SBOM combiner ==