The Linux Foundation Collaboration Summit is an exclusive, invitation-only summit gathering core kernel developers, distribution maintainers, ISVs, end users, system vendors and other community organizations for plenary sessions and workgroup meetings to meet face-to-face to tackle and solve the most pressing issues facing Linux today. If your company is not a member of The Linux Foundation and you are interested in joining please visit our website to learn more about how you can become a Corporate Member.
There is a strong need for both suppliers and consumers of open source software to communicate the licenses, components, and copyrights associated with the open source projects in a consistent and accurate manner. In response to this need, the Linux Foundation’s Software Package Data Exchange (SPDX™) working group released version 1.1. of the specification last fall.
In this session we provide an overview of the current open source tools available which support SPDX including extensions to Fossology to support SPDX being done at the University of Nebraska at Omaha, the Ninka license identification tools developed at the University of Victoria, as well as other open source SPDX tools. A survey of commercial tools supporting SPDX will also be presented.
For business, legal, or technical individuals interested in using SPDX data, this talk will provide a good overview of what tools are available. For open source developers that are interested in supporting SPDX, building their own tools, or contributing to the SPDX tooling effort, this talk will provide a good overview of the existing software which can be re-used.