https://wiki.spdx.org/index.php?action=history&feed=atom&title=Technical_Team%2FMinutes%2F2019-10-08Technical Team/Minutes/2019-10-08 - Revision history2026-05-07T15:37:14ZRevision history for this page on the wikiMediaWiki 1.23.13https://wiki.spdx.org/index.php?title=Technical_Team/Minutes/2019-10-08&diff=4752&oldid=prevGoneall: Created page with "October 8, 2019 == Attendees == * Gary O’Neall * Alexios Zavras * Philippe Ombredanne * Kate Stewart * William Bartholomew * Jeff McAffer * Nisha Kumar * Steve Winslow * Ji..."2019-10-08T18:38:34Z<p>Created page with "October 8, 2019 == Attendees == * Gary O’Neall * Alexios Zavras * Philippe Ombredanne * Kate Stewart * William Bartholomew * Jeff McAffer * Nisha Kumar * Steve Winslow * Ji..."</p>
<p><b>New page</b></p><div>October 8, 2019<br />
== Attendees ==<br />
* Gary O’Neall<br />
* Alexios Zavras<br />
* Philippe Ombredanne <br />
* Kate Stewart<br />
* William Bartholomew<br />
* Jeff McAffer<br />
* Nisha Kumar<br />
* Steve Winslow<br />
* Jim Hutchinson<br />
<br />
==Recording==<br />
Recording for this call can be found at https://zoom.us/recording/share/YXxkHjw6MWhafhBxxyyABE14Yh3Ihoewjqv4nxiUzEGwIumekTziMw<br />
<br />
==SPDX for sBOM==<br />
* Google doc available at https://docs.google.com/document/d/1XfNrDmlVdnUzvtrPsylJZFfz1LLDoqnm_vi_PguSzy8/edit<br />
* Short time to market for SPDX 3.0 would be key<br />
* Large spec – formidable to the uninitiated<br />
* Very focused on licensing<br />
* Introduce profiles – base profile is minimal<br />
* Licensing specifics are moved to a licensing profile<br />
* Modify documentation to allow staged adoption<br />
* Steve suggested joint call with legal and tech teams<br />
** Would include a discussion on the requirement of the NOASSERTION fields<br />
** Schedule joint call for next Tuesday<br />
* Any entity that represents a person or organization should have more structure<br />
** Concern about privacy – esp. European regulations<br />
* Agreement on unifying the terminology for the license information in file and declared license for package<br />
** Discussion Declared, Discovered and Concluded<br />
* Everyone on the call agreed to this approach<br />
<br />
==License Mapping==<br />
* Mapping repo added to SPDX<br />
* Issue with discussions: https://github.com/spdx/package-licenses-mapping/issues/1<br />
* Mapping will be 3 columns:<br />
** Package manager (e.g. maven)<br />
** License string<br />
** SPDX license expression<br />
<br />
==Upcoming SPDX tech call==<br />
* 15 Oct: Joint SPDX tech/legal call<br />
<br />
<br />
[[Category:Technical|Minutes]]<br />
[[Category:Minutes]]</div>Goneall