General Meeting/Minutes/2021-07-01

SPDX Governance - Phil

Status of governance changes

Still working through a using the prepackaged JDF docs with LF lawyers
- Lots there due to general nature
- It will have to go through the specified process for discussion and voting
Why?
- More scrutiny
- Standards requirement- Companies supporting, logos
  - OMG CISQ 3T joining SPDX
  - ISO direction – Need more
  - Executive Order
  - Working with other standards, i.e. SWID and CycloneDX

* Specific concerns that came up

- Community Spec License vs. CCBY
  - Patent license to address concerns that have arisen from companies we want to support
- Also, tangentially related SBOM gen tool showed up in repo
  - Need criteria for including
A question came up about discussion of governance on the Gen Mailing list
- We try to limit traffic on the list so one can use to monitor activity without being overwhelmed
- There will be a chance for discussion of a governance proposal once process goes in motion
- Contact Phil with inputs
- We’ll look into a separate list

Rebooted
SPDX website rework - license for content CC-BY-4.0
- Looking to rebuild website as static site.
- Code and license - more flex over precise styling and functionality.
- Prototype of site in next few weeks.
Technical slides - present about SPDX in own organizations.
- Reviewed collateral, audience focus for collateral that will meet audience needs.
- More explanation of “why”. Point to specification when get to details.
IRC channel
- Sebastian set up #spdx on libera.chat
- previous channels on OFTC, Freenode; hadn’t taken off
- libera.chat has 11 people in it currently
- “cloaking” - hides IP address in some cases, replaces with badge for organization you’re associated with; Sebastian can provide “SPDX cloak”
Matrix bridge - feature of libera.chat, enables joining via Matrix
Meeting date and time: 1500 UTC on Wednesdays will be new meeting time, on 14th of July

Several new folks participating
Ariel and Candice from ClearlyDefined have been digging into the Python stack of licenses
License List 3.14 release - targeting end of July