Technical Team/Minutes/2017-11-28

Nov. 28, 2017

Attendees

• Gary O’Neall
• Alexios Zavras
• Trevor King
• Bradley Kuhn
• Thomas Steenbergen
• Kate Stewart

OR-LATER proposal

• Proposal detail in the email https://lists.spdx.org/pipermail/spdx-legal/2017-November/002375.html
• Do we agree the "OR-MAYBE" should be added?
  • Agree to decouple the ambiguity operator from the GPL specifics, the ambiguous operator?
  • Agree to creating a google doc. to capture use cases, proposal and discussions. Google doc created at https://docs.google.com/document/d/12-HQHGItXHuzjIjqsjsHeLJjkwvcBr5_6nuqx_KCoLY/edit?usp=sharing
  • Agree this is interesting enough to work on a solution, but several of the call participants expressed reservations different solution proposals

Update on SPDX tooling from Thomas

• Tooling inputs repository information
• Open source on github: https://github.com/heremaps/oss-review-toolkit
• Supports 5 build tools
• Package manager information is typically incomplete
• Wraps around various scanners, fixes the meta data
• Setting up a repository for missing package metadata – working with Microsoft, Qualcom, others
• Generates the SPDX at the end
• working with MS, Qualcom others on metadata

Upcoming tech meetings

• Google Summer of Code project ideas – Dec. 5
• Pickup discussion on the ambiguity operator – Dec. 12