https://wiki.spdx.org/index.php?action=history&feed=atom&title=General_Meeting%2FMinutes%2F2015-11-05 2026-05-07T17:37:04Z Revision history for this page on the wiki MediaWiki 1.23.13 https://wiki.spdx.org/index.php?title=General_Meeting/Minutes/2015-11-05&diff=3728&oldid=prev 2015-11-05T18:41:58Z

<p>Created page with &quot;* Attendance: 12 * Lead by Phil Odence * Minutes of Oct meeting approved/ == Siemens - Oliver Fendt == * Open Source Group ** Deals with compliance issues ** Made up of me...&quot;</p> <p><b>New page</b></p><div>* Attendance: 12<br /> * Lead by Phil Odence<br /> <br /> * Minutes of Oct meeting approved/<br /> <br /> == Siemens - Oliver Fendt ==<br /> <br /> * Open Source Group <br /> ** Deals with compliance issues<br /> ** Made up of members from all parts of the company<br /> ** Has been going for 2.5 years<br /> ** Recognized SPDX early in their existence<br /> *** Took a close look<br /> *** First interest was in the license list<br /> **** Requested some license for list; some successful, some not<br /> **** Participated in discussion about how to handle license exceptions<br /> ** SPDX 2.0 was coming on line<br /> *** Voted internally to adopt SPDX<br /> *** And to start requiring SPDX docs from their suppliers<br /> ** Got involved with FOSSology<br /> *** Implemented initial SPDX 2.0 in FOSSology<br /> **** Just RDF, not yet Tag Value<br /> ** Became aware of process of development of standard<br /> ****Concerned about the direction, specifically snippet discussion<br /> **** Concerns that it contradicts vision/mission<br /> **** Minimizing costs across the supply chain<br /> **** Concerned that granularity of snippets and that it’s hard to say, unless you are the developer<br /> **** So, worries about usability<br /> **** And that it adds interpretation, for example, Black Duck Protex requires the human to interpret<br /> **** Also, since there is no open source tool that does snippets, adoption may be limited<br /> *** Would be interested in adding other sorts of information like ECC info<br /> ** They are currently using the latest/greatest FOSSology and encouraging suppliers to do same<br /> ** Starting to see projects using SPDX short IDs in files<br /> ** Suppliers normally don’t deliver source code; Siemens requires that they assert that the comply w/copyrights<br /> *** So they typically don’t scan source.<br /> *** They use FOSSo<br /> *** And they encourage SPDX to supply the info<br /> <br /> <br /> == Tech Team Report - Kate/Gary ==<br /> <br /> * Busy refining external identifiers proposal<br /> ** Aim was a single field <br /> ** Thought is to break into multiple fields, source of identifier and the domain<br /> ** Wrestling with the difference between security IDs (NVD/CPE) and repos (e.g. Debian)<br /> * Also, recently revisited snippets proposal<br /> ** Now is a good time to weigh in.<br /> * Tools<br /> ** Active; Sebastian Schubert has been a big contributor recently<br /> *** Mostly fixes<br /> *** 2.1 will add some work<br /> *** UNO repos also very active<br /> <br /> <br /> == Legal Team Report - Jilayne ==<br /> <br /> * Cross functional work with tech team on templates and matching<br /> ** recent joint call, apologies for 10 person limit on call; will address<br /> ** Looking to change maintenance process<br /> ** Lots of good discussion about implementing matching guidelines<br /> ** plan is for another joint call in early December<br /> <br /> <br /> == Biz Team Report - Jack ==<br /> <br /> * Working with LF on a new look feel for website<br /> ** In parallel, changing some of the navigation.<br /> ** Looks like it’s been delayed, so probably 2-3 weeks before rollout<br /> ** Some progress already; looking good so far<br /> * In process of changing name of team to Outreach Team<br /> ** Will roll out with new website<br /> * Eclipse Foundation<br /> ** Might be interesting group to speak with about SPDX<br /> <br /> == Cross Functional Topics - Phil ==<br /> <br /> * See Jack’s brief blog on SPDX.org pointing must read blog by Eric Raymond on SPDX<br /> <br /> <br /> == Attendees ==<br /> <br /> * Phil Odence, Black Duck<br /> * Oliver Fendt, Siemens<br /> * Tarek Jomaa. ARM<br /> * Gary O’Neill, SourceAuditor <br /> * Jilayne Lovejoy, ARM<br /> * Jack Manbeck, TI<br /> * Richard Christie, ARM<br /> * Pierre LaPointe, nexB <br /> * Sami Atabani, ARM<br /> * Kate Stewart, Linux Foundation<br /> * Michael Herzog- nexB<br /> * Scott Sterling, Palamida <br /> <br /> <br /> [[Category:General|Minutes]]<br /> [[Category:Minutes]]</div>

Podence