We had an excellent OpenChain Global First Monday call. It covered a lot of news and we had a robust, useful discussion on some items in the specification.
Review the Agenda
Watch the Video Minutes
All Our Agenda Slides and Minutes
Newsletter – Issue 34 – February 2020
We are delighted to announce that Moxa is our latest Platinum Member company. As a leading provider of industrial edge-to-cloud connectivity and computing solutions for Industrial Internet of Things (IIoT) environments, Moxa has demonstrated its continuous commitment to open source compliance to enable advanced industrial networking and communications applications for the IIoT world.
“Moxa is thrilled to join the OpenChain Project to demonstrate our commitment in supporting open source compliance standard,” said Andy Cheng, President of Strategic Business Unit at Moxa. “Moxa has been a strong supporter of the Linux Foundation for some of its important projects such as Civil Infrastructure Project (CIP) for long-term support Linux distribution. We are now looking forward to working closely with the OpenChain community for industry standards of open source compliance.”
OpenChain @ Specification
- One Slide Summary of Where OpenChain Fits in Workflows. A request for comments:
https://www.openchainproject.org/news/2020/02/12/request-for-comments-one-slide-summary-of-where-openchain-fits-in-workflows
OpenChain @ Interviews
- The 10th OpenChain Project interview is live! Meet Alex:
https://www.openchainproject.org/news/2020/02/12/the-openchain-interviews-meet-alex - The OpenChain Interviews continue with our first male interviewee, Leon from the law firm GTC:
https://www.openchainproject.org/news/2020/02/13/the-openchain-interviews-meet-leon-from-gtc
OpenChain @ Conformance
- OpenChain Conformance: The Arm Case Study
This case study unpacks how the open source team at Arm used the OpenChain industry standard to simplify and speed their compliance process.
Find out more:
https://www.openchainproject.org/featured/2020/02/17/openchain-conformance-the-arm-case-study - OpenChain Cheat Sheet – Conformance Requirements in One Page
Check out the slide + explanation here:
https://www.openchainproject.org/news/2020/02/06/openchain-cheat-sheet-conformance-requirements-in-one-page
OpenChain @ Partners
- NTT DATA Italy collaborates with OpenChain project to build trust in open source:
https://www.openchainproject.org/news/2020/02/05/ntt-data-italy-collaborates-with-openchain-project-to-build-trust-in-open-source - PwC Provides Expanded Details on OpenChain Services:
https://www.openchainproject.org/news/2020/02/24/pwc-provides-expanded-details-on-openchain-services
OpenChain @ Work Groups
- OpenChain + SPDX Lite – Credit where Credit is Due
The OpenChain Japan Work Group has run an active licensing sub-work group throughout 2019. Their activity has been focused on practical applications of a streamlined Software Bill of Materials using core attributes of SPDX. Now that the work is advanced, collaboration with the SDPX Project is fully established, and we are heading into production it is time to highlight the individuals behind this initiative.
Find out more:
https://www.openchainproject.org/news/2020/02/24/openchain-spdx-lite-credit-where-credit-is-due - Slides from the OpenChain Automotive Work Group. Yuichi Kusakabe kindly made his slides from a recent global Automotive Work Group meeting available:
https://www.openchainproject.org/news/2020/02/17/slides-from-the-openchain-automotive-work-group - Minutes of the OpenChain Reference Tooling Work Group Meeting – 12th February 2020:
https://www.openchainproject.org/featured/2020/02/17/minutes-of-the-openchain-reference-tooling-work-group-meeting-12th-february-2020 - OpenChain Korea Work Group Meeting # 5 – Kakao Seoul on the 19th of March (remotely)
The 5th meeting of the OpenChain Korean Work Group will be hosted by Kakao in Seoul. See the agenda here:
https://www.openchainproject.org/featured/2020/02/17/openchain-korea-work-group-meeting-5-kakao-seoul-on-the-19th-of-march - OpenChain Japan Work Group Meeting # 13 – Cancelled
Due to the deteriorating situation in Japan with the COVID-19 virus we have taken the decision to cancel this event.
https://www.openchainproject.org/featured/2020/02/16/openchain-japan-work-group-meeting-13-cancelled - The video minutes for the first meeting of the OpenChain Germany Work Group are now available:
https://www.openchainproject.org/news/2020/02/07/openchain-germany-meeting-1-2020-02-06-video-minutes
and here:
https://www.openchainproject.org/featured/2020/02/07/openchain-germany-meeting-1-2020-02-06-minutes
OpenChain @ Third Party Certification
- Our partners over at PwC Germany have just released a video outlining their Third Part Certification for OpenChain Project. This is another example of the growing user community and support community around our industry standard for open source compliance.
See the video here:
https://www.openchainproject.org/news/2020/02/06/material-to-help-contextualize-available-third-party-certification
OpenChain @ Events
- OpenChain @ DLA Piper’s Open Source In-House Counsel Discussion on February 26th
https://www.openchainproject.org/news/2020/02/24/openchain-dla-piper-feb-2020 - OpenChain Reference Tooling Work Group @ FOSDEM – February 2020
The OpenChain Reference Tooling Work Group held a series of meetings adjacent to the FOSDEM conference in Brussels. Here are the outcomes and minutes as provided by Oliver Fendt:
https://www.openchainproject.org/news/2020/02/04/openchain-reference-tooling-work-group-fosdem-february-2020
OpenChain @ Translations
- Thanks to the hard work of Denis Dorotenko at Yandex (https://dorotenko.pro/english/) the OpenChain Specification 2.0 has a draft translation in Russian.
Read more here:
https://www.openchainproject.org/news/2020/02/17/draft-openchain-specification-2-0-available-in-russian - OpenChain Supplier Education Leaflet – German Draft
Stefan from Fiducia & GAD IT announced yesterday that work is well advanced on a German translation of our Supplier Education Leaflet.
Read Stefan’s full announcement and call for support here:
https://www.openchainproject.org/news/2020/02/07/openchain-supplier-education-leaflet-german-draft
OpenChain @ In The News
- OpenChain featured in Corporate Review Magazine
Read more here:
https://www.openchainproject.org/news/2020/02/17/openchain-featured-in-corporate-review-magazine - OpenChain Featured in CIO Review India
Read the article here:
https://www.openchainproject.org/news/2020/02/17/openchain-featured-in-cio-review-india
PwC offers Open Source Software management compliance attestation according to the OpenChain industry standard. Thanks to a global PwC reporting platform, the report can be made available to all clients, effectively demonstrating the professional and appropriate handling of Open Source Software.
Suppliers will benefit from PwC OSS certification in invitations to tender, in the initiation of contracts and in negotiations with purchasing departments. At the same time, they will benefit from the outwardly presentable proof of OSS compliance when selling their products and services, as they create confidence in their products
Specifics on PwC OpenChain Services
Check Out the Case Study Created for OpenChain
More About Their Open Source Work
The OpenChain Japan Work Group has run an active licensing sub-work group throughout 2019. Their activity has been focused on practical applications of a streamlined Software Bill of Materials using core attributes of SPDX. Now that the work is advanced, collaboration with the SDPX Project is fully established, and we are heading into production it is time to highlight the individuals behind this initiative.
Great Thanks are Due To
- Toru TAIMA
- Yuji NOMURA
- Yoshiyuki ITO
- Yoshiko OUCHI
- Norio KOBOTA
- Hiroyuki FUKUCHI
Taima-san from Pioneer is the senior contributor to this effort who defined the initial fields based on a practical business use case.
Nomura-san from Hitachi, Ito-san from Renesas and Ouchi-san from Fujitsu proposed improvements to the SPDX Lite description and format.
Kobota-san from Sony took lead on confirming full compatibility between SPDX and SPDX Lite.
And of course Fukuchi-san from Sony proposed the original concept, formed the sub-work group, and wrote the proposal of SPDX Lite.
In addition to these contributors all the members of “license info” sub-group contributed to the work and final go-to-market activity.
Learn More
The 5th meeting of the OpenChain Korean Work Group scheduled to be hosted by Kakao in Seoul on the 19th of March has been cancelled. The cancellation is due to COVID-19 and joins recent cancellations of face-to-face work group meetings in China and Japan.
We are exploring the possibility of holding the meeting via teleconference. Most details to follow soon.
More Information on the Korea Mailing List
The OpenChain Project is delighted to highlight that Yoma Bank is the latest organization to have a publicly announced OpenChain conformant program. Yoma Bank joins many other companies from a diverse range of market sectors collaborating to make open source compliance faster, more effective and more efficient.
Founded in 1993, Yoma Bank is Myanmar’s most progressive domestic bank. It offers savings products, a wide range of loans and business solutions to individuals, SMEs and local corporate clients to fund their business operations in Myanmar. With over 25 years of being responsible bank, Yoma Bank has been consistently making significant investments in strategic priorities- people, technology and corporate governance. Yoma Bank stands in the top 5 banks in Myanmar by assets with 3000+ employees and 80+ branches across the country.
“Yoma Bank is a natural fit for OpenChain conformance,” says Shane Coughlan, OpenChain General Manager. “Their commitment to quality, to ethical banking, and to innovation will be familiar to every company working in the open source community. We look forward to using this opportunity to build out more relationships in Myanmar and beyond.”
More About Yoma Bank
Yoma Bank strives to fulfill its mission to “Build a better Myanmar for its people” financing the needs of Myanmar families and businesses. All the operations led by the Bank are centered around its core values such as Customer, Integrity, Respect, Teamwork and Innovation. Yoma Bank has also established strong partnership with both local and international organisations leveraging strategic advantages in its services. For more information, please visit www.yomabank.com.
About the OpenChain Project
The OpenChain Project builds trust in open source by making open source license compliance simpler and more consistent. The OpenChain Specification defines a core set of requirements every quality compliance program must satisfy. The OpenChain Curriculum provides the educational foundation for open source processes and solutions, whilst meeting a key requirement of the OpenChain Specification. OpenChain Conformance allows organizations to display their adherence to these requirements. The result is that open source license compliance becomes more predictable, understandable, and efficient for participants of the software supply chain.
About The Linux Foundation
The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and industry adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.
The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page: https://www.linuxfoundation.org/trademark-usage.
###
Linux is a registered trademark of Linus Torvalds.
All other trademarks belong to their respective owners.
Our Regular OpenChain Third Monday call was held today at 5pm Pacific. We had attendees from Korea, Japan and the USA. This call caught everyone up with the latest news and provided a forum to discuss next steps in our conformance, reference and other material.
Watch the Call
Get the Slides
The OpenChain Project periodically releases overview slides with speaker minutes to help explain our activities to organizations. These slides are designed to support local speakers with extensive notes. You can download them via SlideShare. Please feel free to share these slides with everyone who may be interested.
View the Slides
Taipei, Taiwan, Feb 18, 2020—The OpenChain Project, an initiative by the Linux’s Foundation to streamline open source compliance, announced today that Moxa Inc. has joined as a Platinum member. As a leading provider of industrial edge-to-cloud connectivity and computing solutions for Industrial Internet of Things (IIoT) environments, Moxa has demonstrated its continuous commitment to open source compliance to enable advanced industrial networking and communications applications for the IIoT world.
The OpenChain Project aims to build trust in open source by making open source license compliance simpler and more consistent across supplies chains. The OpenChain Specification defines inflection points in business workflows where a compliance process, policy, or training should exist to minimize the potential for errors and maximize the efficiency of bringing solutions to the market. The OpenChain Specification is being prepared for submission to ISO and evolve from a de facto standard into a formal standard.
“Moxa is thrilled to join the OpenChain Project to demonstrate our commitment in supporting open source compliance standard,” said Andy Cheng, President of Strategic Business Unit at Moxa. “Moxa has been a strong supporter of the Linux Foundation for some of its important projects such as Civil Infrastructure Project (CIP) for long-term support Linux distribution. We are now looking forward to working closely with the OpenChain community for industry standards of open source compliance.”
As a Platinum member, Moxa will be the first Taiwan-based company to join the OpenChain’s board, expanding the project’s reach across multiple industries. An array of industry-leading companies have already joined the Platinum membership program, including Arm Holdings, Bosch, Cisco, Comcast, Facebook, Fujitsu, Google, Harman International, Hitachi, Microsoft, Panasonic, Qualcomm, Siemens, Sony, Toshiba, Toyota, Uber, and Western Digital.
“We have been working with Moxa for a considerable period of time as Moxa has actively participated in OpenChain community during its key growth phase over the last two years,” said Shane Coughlan, OpenChain General Manager. “Our announcement today underlines the commitment on all our parts to further deepening collaboration and understanding. When we have a great opportunity in 2020 to build incredible bridges across the Mandarin-speaking world to ensure great open source compliance, I believe Moxa is a critical, timely partner to help us accomplish this goal.”
About the OpenChain Project
The OpenChain Project builds trust in open source by making open source license compliance simpler and more consistent. The OpenChain Specification defines a core set of requirements every quality compliance program must satisfy. The OpenChain Curriculum provides the educational foundation for open source processes and solutions, whilst meeting a key requirement of the OpenChain Specification. OpenChain Conformance allows organizations to display their adherence to these requirements. The result is that open source license compliance becomes more predictable, understandable, and efficient for participants of the software supply chain.
About The Linux Foundation
The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and industry adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.
The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page: https://www.linuxfoundation.org/trademark-usage.
About Moxa
Moxa is a leading provider of edge connectivity, industrial computing, and network infrastructure solutions for enabling connectivity for the Industrial Internet of Things. With over 30 years of industry experience, Moxa has connected more than 65 million devices worldwide and has a distribution and service network that reaches customers in more than 80 countries. Moxa delivers lasting business value by empowering industry with reliable networks and sincere service for industrial communications infrastructures. Information about Moxa’s solutions is available at www.moxa.com.
###
Linux is a registered trademark of Linus Torvalds.
The Moxa logo is a registered trademark of Moxa Inc. All other trademarks mentioned in this document are the property of their respective owners.
This case study unpacks how the open source team at Arm used the OpenChain industry standard to simplify and speed their compliance process.
It includes detailed information on the approach selected, the timescales used, and the outcomes reached. It will be useful for any company currently considering or undergoing OpenChain self-certification, compliance assessment or third-party certification.
Review the Case Study
Download the Case Study
