Announcements

SPDX Tools have a new Home

By Announcements

Greetings to the community,

We are excited about the hosting of the SPDX tools on a more robust and hopefully permanent platform. A new URL for the SPDX online tools is now be available at https://tools.spdx.org

We want to thank everyone for using the tools and providing us with valuable feedback and to those who helped donate for the new hosting via the SPDX Community Bridge for the online tools.

A new version of the online tools implementing several enhancements and an improved deployment infrastructure is currently in test. Once the testing and the upgrade is complete in 2 to 4 weeks, any previous links used for the tools will no longer be available, so be sure to bookmark the new location.

The new version has the following enhancements:

  • License submittals will now check for existing license matches
    • If there is an exact match, the application will inform the user and not accept the new submittal
    • If there is a close match, the user is presented with the differences and can chose to submit an issue that the licenses should match, or chose to submit a new license request
  • A higher performance license matching implementation
  • A license namespace registry has been added to allow organizations to submit license namespace requests
  • Various application enhancements and fixes

If you find any issues or would like to request any enhancements, please add them to the spdx-online-tools Issues list.

Thanks to the many students, mentors and SPDX team members who have contributed to the online tools including Rohit  who was the originator of the online tools and mentor to many students, Smith who contributed the namespace functionality, Umang who implemented the improved license submittal, Mehant who contributed the Docker deployment implementation, and Steve who help us obtain the new URL.

License List v3.10 released

By Announcements

The version 3.10 release of the license list is now tagged and live at https://spdx.org/licenses.

This release included (as you’ll see below) a number of different variants on existing licenses, as well as a handful of new ones.

In addition to the new license entries and various cleanup, this release included a substantial rewrite of documentation about the workflow for adding new licenses. If you’re interested in participating in the process, please come join us!

20 new licenses were added to the list:

More details can be found in the release notes at https://github.com/spdx/license-list-XML/releases/tag/v3.10.

Thank you to the license request submitters and participants in the SPDX Legal community who contributed to this release.

License List v3.9 released

By Announcements

The version 3.9 release of the license list is now tagged and live at https://spdx.org/licenses.

Along with the usual assortment of documentation updates and markup tweaks, this is the first release with the updated license inclusion principles.

16 new licenses and exceptions were added to the list:

More details can be found in the release notes at https://github.com/spdx/license-list-XML/releases/tag/v3.9.

Thank you to the license request submitters and participants in the SPDX Legal community who contributed to this release.

Automating Compliance

By Announcements

This talk was given at the Open Source Leadership Summit on March 7th, 2018 by Kate Stewart (SPDX Technical Team Lead), Greg Kroah-Hartman (Linux Kernel Developer), and  Philippe Ombredanne (Aboutcode.org Maintainer).  It discusses efforts to help automate license identification, where open source tools are out and some of the challenges around this using the Linux Kernel as an example.

Link to the slides