https://wiki.spdx.org/index.php?action=history&feed=atom&title=Technical_Team%2FMinutes%2F2015-09-15 2026-05-07T12:20:37Z Revision history for this page on the wiki MediaWiki 1.23.13 https://wiki.spdx.org/index.php?title=Technical_Team/Minutes/2015-09-15&diff=3678&oldid=prev 2015-09-15T20:16:15Z

<p>Summary of 9/15 Tech Team Meeting on External Identifiers.</p> <p><b>New page</b></p><div>Sept 15, 2015<br /> == Attendees ==<br /> * Kate Stewart<br /> * Bill Schineller<br /> * Yev Bronshteyn<br /> * Hassib Khanafer<br /> * Matt Germonprez<br /> * Mark Gisi<br /> * Michael Herzog<br /> <br /> ==External Identifiers==<br /> <br /> External Identifiers proposal for discussion: https://docs.google.com/document/d/1RpIFg41LdD6CKcw2FyJw1G5fpaEK6Z-XFM-66JUc8Jo/edit<br /> :* title agreed to be “External Identifiers” - drop Packages &amp; Versions (although all agree version information is important to capture, want to have broader reach)&gt;<br /> :* general agreement that Appendix approach is way we want to go.<br /> ::* want to have separate section for “security reference” to make easy to find/marketing purposes.<br /> ::* software package management systems (Group Artifact Version) and software distributions sections consider to combine to &quot;Package Managers and Code Repositories&quot; for next meeting. <br /> ::* how handle other external databases?<br /> :::* space for cross links to other tools (like Open Hub, Proprietary tools)<br /> :::* github example - where does this fit? (reason for merging package managers &amp; code repositories to one section&quot;<br /> :* Criteria for adding to appendix:<br /> ::* We get agreement from project on data format, if it doesn’t have a formalized version already documented. Like feedback we've just gotten from Debian which needs to be included in next draft.<br /> ::* Tables in Appendix to be reformatted a bit, so better ties up to text, Bill to work on for next meeting. <br /> :* Open Questions:<br /> ::* Which section does External Identifiers live? likely in Package level (discuss usecase with FIle, and make sure ok to refer to as External Package).<br /> ::* Will it work for Financial Services Applications examples - looking to build on CPEs with External Packages. BOM with CPEs.<br /> External Packages proposal. https://docs.google.com/document/d/11kjtrzuZVKlbWIjaEq7bbZPA_cT55eLOOxpnnQ_rghU/edit#heading=h.gjdgxs<br /> <br /> Next week, revisit external IDs and External Packages - does the use case work. Bill to make changes to External Identifiers proposal prior to meeting.<br /> <br /> Reminder please sign up for: Supply chain workshop on October 8 in Dublin. (Stefano and Uday). http://events.linuxfoundation.org/events/linuxcon-europe/extend-the-experience/supply-chain-summit<br /> <br /> [[Category:Technical|Minutes]]<br /> [[Category:Minutes]]</div>

K.stewart