THE SPDX WIKI IS NO LONGER ACTIVE. ALL CONTENT HAS BEEN MOVED TO https://github.com/spdx

Difference between revisions of "Technical Team/Use Cases/2.0/Third party produces bill of materials for software package"

From SPDX Wiki
Jump to: navigation, search
 
(No difference)

Revision as of 18:20, 17 April 2012

A customer requests a third party to audit their entire codebase to determine all rights holders and licenses for every file in the code base

Stackholders and Interests

Auditee
The organization in possession of the code that wants to understand the licensing and rights holders of that code.
Auditor
Third party that need to analyze the codebase and inform the auditee of what the licensing is and who the rights holders are.

Main Success Scenario

  1. Auditee delivers code to auditor
  2. Auditor extracts licensing and copyright information from files
  3. Auditor evaluates evidence and identifies most likely licensing and rights holders
  4. Auditor provides SPDX data to auditee
  5. Lawyers at auditee look at concluded licensing and right holder and take any necessary actions to comply with the licenses
Retrieved from "https://wiki.spdx.org/index.php?title=Technical_Team/Use_Cases/2.0/Third_party_produces_bill_of_materials_for_software_package&oldid=1749"