Skip to content

General Meeting/Minutes/2012-11-29

Archived page

Read-only copy of the SPDX wiki. The wiki is no longer active; its content has moved to https://github.com/spdx. Last edited 2013-03-06 by MartinMichlmayr.

  • Attendance: 11
  • Minutes of Nov 1 meeting approved.
  • Lead by Phil Odence

Special Report on Open Compliance Summit, Japan - Adam

  • Overview
  • End of October. Great Event in General.
  • Surprising amount of awareness/interest in SPDX to help with recruitment
  • Adam/Mark Gisi (Windriver) pulled together a come all SPDX info meeting to help with recruitment
  • Chatham House rules, so sharing but no attribution of comments
  • Unscheduled Roundtable
  • Pulled together at last minute for end of first day
  • 12 participants (surprisingly high)
  • Lots of interest and awareness. According to Adam, "the concept of SPDX sold itself)
  • Continued discussion with a number of participants the next day
  • Flavor of discussion/inquiry
  • Caution/Concern
  • Fear of Unknown
  • Language Issue
  • Fear of obligation- Worry that signing up is somehow a big commitment
  • Concerns
  • Language Issue
    • More written materials would really help
    • English is OK (for written stuff) but looking for "User Manual" level documentation
    • The language of the Spec itself is difficult for non-English speakers
  • Seems Complicated
    • But MarkG was able to make folks understand it's not really
    • So a simple, written explanation would really help
    • Specific interest in understanding mandatory v. optional; what's the minimum
    • Kate had similar experience at U of Nebraska - Concern about complexity that went away after simple explanation.
    • So, all this is s general issue, but answer for Japan has to be written doc due to language.
  • Obligation
    • Concern that if you touch SPDX, you have to overhaul your entire compliance operation
    • Need to help folks understand, it's just a format and can fit your processes; it's a spec, not a business method
  • Current State
  • A number of companies we didn't even know were aware are piloting internally
  • Some of these are not even on any mailing lists
  • How we can help
  • Written, user level doc
  • Help people understand how to dip a toe in
  • Lots of interest in understanding how to be just a consumer

Business Team Report - Jack

  • Met with Matt and team at U of Nebraska
  • Good progress with adding SPDX output capability to FOSSology
  • Turned up some issues with the existing tools which Gary is looking into
  • Discussion about creating tools for consuming SPDX
  • Looking at integrating with Git and Jack envisions an Eclipse-like plug-in framework
  • Team understands need for a consumer guide- we need a resource to take that on
  • After first of year need to start planning F2F at Collboartion Summit
  • Steve Cropper is driving the idea of creating a model supply chain with different participants exchanging and compiling SPDX files.

Tech Team Report - Kate

  • Working on Modeling different approaches
  • Testing against use cases
  • Anticipated slowness due to holiday and as well as Ed's being somewhat tied up
  • Anticipating downtime over holidays.
  • Finishing up FSF license list additions to be included in LL 1.17
  • Should be by end of year
  • Represents 30-40 new licenses
  • Recent discussion has been about criteria or "filter" for license adds wiht a small group; needs broader input
  • Next meeting will discuss 2013 priorities

Cross Functional Issues – Phil

  • Web Site Update - Jack
  • Framework is in place
  • Getting feedback from Core Team
  • WE NEED SOME VOLUNTEERS TO WORK ON THE TRANSITION AND ONGOING. HELP

Attendees

  • Phil Odence, Black Duck
  • Jilayne Lovejoy, OpenLogic
  • Kamyar Emami, Protecode
  • Gary O'Neill, SourceAuditor
  • Kirsten Newcomer, Black Duck
  • Jason Buttura, Cisco
  • Pierre Laponte, nexB
  • Kate Stewart
  • Jack Manbeck, TI
  • Adam Cohn, Cisco
  • Scott Lamons, HP

Categories: General, Minutes