Skip to content

Technical Team/Minutes/2011-08-02

Archived page

Read-only copy of the SPDX wiki. The wiki is no longer active; its content has moved to https://github.com/spdx. Last edited 2013-03-06 by MartinMichlmayr.

Attendees

  • Kirsten Newcomer
  • Nicholas Loke
  • Peter Williams
  • Kate Stewart
  • Steve Cropper
  • Jack Manbeck
  • Marshall Clow

Agenda

  • Discussion of Supplier related fields
  • Review of recent updates to the Spec
  • Open Action Items (see list at end of minutes)

Supplier fields discussion

  • Kate has updated the working version of the spec with the two fields discussed last week
  • Package Supplier
  • Package Originator
  • Today's discussion started with some email threads on intended use of
  • We seem to have a common understanding of what info should be used to fill in the Package Supplier field
  • We're still working toward a common understanding for the Package Originator field
  • We discussed a few possibilities. For example, is the data in the Package Originator field
    • the copyright holder?
    • the place where the Supplier got the code?
  • We discussed the desire to capture the chain of custody in the SPDX document; Kate noted that was part of the original intent of the Reviewer field
  • We noted that there is an overlap between the goal of capturing chain of custody and the need for hierarchy in the SPDX document; hierarchy will be discussed post 1.0
  • Concluded: we need to make an extra effort to document the thinking behind these fields and provide usage guidelines

Additional updates to Spec

  • Kate walked the team through some additional updates that have been made to the spec as well as some planned changes based on feedback
  • Key changes include:
  • Clean up of RDF section (typos, spelling)
  • Proposed changes to certain field names for tag/value
  • Section 1.7: Conformance statement will point to trademark statement that is being worked by legal team and will be posted to web. This is not yet finalized.
  • Section 2.2: SPDX data will still be delivered under PDDL-1.0. Confidentiality field has been dropped.
    • Acknowledged that this could be an issue for using SPDX with commercial/proprietary code and plan to discuss commercial code use case post-1.0 GA
  • Recommend that info be added on where to provide feedback

Open Action Items

  • Everyone: Bug list review
  • review for any open P1s assigned to you
  • review closed bugs to be sure we're in agreement
  • Start developing Guidelines for Implementation/Use and/or Best Practices
  • Everyone: Review current FAQ as starting point. You can find it here: http://spdx.org/spec/guidelines
  • If you've volunteered to update/add to a certain section, please add your name here. :-)
  • Kirsten: Provide website location for 2 items so can be referenced in Spec
  • Process for requesting licenses be added to SPDX license list.
  • SPDX trademark terms.
    • I've added placehoder text for a links here: http://spdx.org/spec
    • I don't have the privs to create a new child page and will send a note to Martin
  • Everyone: Please review the spec with the goal of approving final version next week if possible

Corrections, additions welcome.

Categories: Minutes, Technical