Newsletter – Issue 22 – February 2019
The OpenChain Project has active bi-weekly calls and a central mailing list that provide the “nuts and bolts” of our community activity. These are joined by various releases of documents and announcements of OpenChain-related events throughout each month. We collect key developments in this newsletter once a month.
Introduction
Building trust in open source: a look inside the OpenChain Project
Open source software provides businesses with a number of benefits including cost, flexibility and freedom. This freely distributed software can also be easily altered by any business that is familiar with its source code.
Read more in TechRadar.
OpenChain @ Announcements
Microsoft joins OpenChain platform
As part of its continued efforts to support open source software, Microsoft has announced that it has joined the OpenChain Project as its latest platinum member.
The company joins the likes of Uber, Google and Facebook, who joined OpenChain last month as well as GitHub which the software giant acquired last year.
Read more in TechRadar.
Microsoft joins OpenChain open-source compliance group
OpenChain is the most important open-source project you’ve never heard of before. This Linux Foundation consortium provides an industry standard for open-source supply chain license compliance. And now, Microsoft has joined the the OpenChain Project.
Read more at ZDNet.
Microsoft joins the OpenChain Project to push open-source software licensing standards
Microsoft Corp. wants to support more standardization of open-source software licensing, so today it’s putting its weight behind the OpenChain Project as its latest platinum member.
Microsoft joins other platinum members that include Google LLC, Arm Holdings Ltd. and Facebook Inc., as well as GitHub Inc., which Microsoft acquired last year.
The OpenChain Project was set up to bring more clarity to the world of open-source software licenses. Open-source software has revolutionized the way in which companies build the technology they need to run their businesses, but licensing issues remain a big headache for their legal teams. In a constant state of panic over potential litigation issues, businesses need assurances that the open source they use is in compliance with whatever rules govern its use.
Read more in Silicon Angle.
Microsoft joins open-source foundation that is trying to simplify the software supply chain
The OpenChain Project, which is attempting to bring a little more clarity to the turbulent world of modern open-source licensing, is the latest beneficiary of Microsoft’s open-source redemption tour.
Read more in GeekWire.
Microsoft Joins OpenChain Project to Help Standardize Open Source Licensing
Microsoft has announced it is joining the OpenChain Project in another move that furthers the company’s embracing of the open source community. In a post this week, Microsoft says it is joining the OpenChain Project goal to standardize open source licensing.
Read more in WinBuzzer.
OpenChain Project Announces Bosch as Platinum Member
SAN FRANCISCO – February 28, 2019 — The OpenChain Project, which builds trust in open source by making open source license compliance simpler and more consistent, announced today that Bosch has joined as a platinum member. Membership momentum continues to grow for the project, as Microsoft joined just a few weeks ago as well as other large companies including Uber, Google and Facebook in December. OpenChain provides a specification as well as overarching processes, policies and training that companies need to be successful in managing open source license compliance so that it becomes more efficient, understandable and predictable for participants of the software supply chain.
As code flows between companies that consume billions of lines of open source software through their supply chains to build new products and services, a key challenge is ensuring the relevant license requirements are met in a timely and effective manner. The OpenChain Project provides a consistent way to address that and other challenges. Conformance with the OpenChain Specification shows that an organization follows the key requirements of a quality open source compliance program, and builds trust between organizations in the supply chain. It makes procurement easier for purchasers and preferred status easier for suppliers.
Over the last 15 years, Bosch has embraced open source software starting with consuming open source tooling in automotive using the Eclipse IDE, embedding Linux into Bosch products, and co-innovation of software in public funded projects. Bosch is now leading more than a dozen open source projects and actively driving its open platform strategy for the Bosch IoT Suite at Eclipse IoT with over 1.5 million contributed lines of code. Therefore, it has a special interest in increasing the number of collaborating companies using mature open source management processes. Bosch believes OpenChain is a great platform to share good practices and improve the open source management systems and processes, so other companies can join open source communities.
The OpenChain Specification is the only standard for open source compliance in the supply chain and has major interest from automotive companies. Toyota is currently a platinum member and Scania recently became OpenChain conformant. Also, companies like Panasonic and Renesas are active in the community work groups.
“An open source management system standard will be key for successful collaboration on open source management infrastructure and services,” said Hans Malte Kern, Head of the Center of Competence Open Source, Bosch. “We’re excited to join the OpenChain project, as it reflects the importance of compliant open source usage, distribution, and contribution. Instead of negotiating the open source requirements with all our partners and suppliers, Bosch will leverage OpenChain as an open standard that provides common approaches and understanding for open source collaborations – not only in the automotive industry but also the connected world of IoT. We are convinced the OpenChain standard will replace bilateral negotiations, educations, and open source risk mitigation discussions.”
“It is terrific to have Bosch join other automotive companies such as Toyota as a platinum Member,” said Shane Coughlan, OpenChain General Manager. “Bosch is no stranger to the OpenChain Project and has a long history of contributing to open source compliance activities. We are thrilled to have them participate in the Governing Board, Steering and Outreach Committees, as well as the work team calls and meetings to help drive this community forward.”
As a platinum member, a representative from Bosch will join the OpenChain Governing Board. Other platinum members of the OpenChain project include Adobe, ARM Holdings, Cisco, Comcast, Facebook, Google, Harman International, Hitachi, Microsoft, Qualcomm, Siemens, Sony, Toshiba, Toyota, Uber and Western Digital.
OpenChain @ Reference Material
The recently released OpenChain M&A Checklist has inspired discussion and further contribution to the project. Ibrahim Haddad has just announced a new draft M&A White Paper discussing open source processes in detail. At this time we are seeking review and comments ahead of a projected March release.
Review the Draft Text
OpenChain Specification 2.0 – Comment Now
It is official – we are now seeking broader public comments for version 2.0 of the Specification. This is one of the last major steps in the spec development cycle which is described here:
https://wiki.linuxfoundation.org/openchain/openchain-specification-wiki-page?&#specification_developmentrelease_process
We will continue to collection feedback from the OpenChain community through the public comments stage as well which concludes on March 22nd.
The current draft is available at:
https://wiki.linuxfoundation.org/_media/openchain/openchainspec-2.0.draft.pdf
Past readers of the spec might find the marked up version useful: https://wiki.linuxfoundation.org/_media/openchain/OpenChainSpec-2.0.draft.MarkUp.pdf
You can send feedback via:
the Mailing list: Openchain-specification@lists.linuxfoundation.org;·
the issues wiki: https://github.com/OpenChain-Project/Specification/issues;
or·
replying to Mark Gisi directly if you wish to remain anonymous (mark.gisi@windiver.com)
Updated Intro Slides – OpenChain – Great Open Source Compliance For Everyone
The latest version of the OpenChain Project introduction slides are available. These slides can help bring anyone interested in our standard and supporting material up-to-speed. Full speaker notes included on the downloadable version:
https://www.slideshare.net/ShaneCoughlan3/great-open-source-compliance-for-everyone-version-5
OpenChain @ Localization
OpenChain Japan Planning Subgroup報告 (2018年12月～2019年2月活動分)
‘OpenChain Japan Planning Subgroup報告 (2018年12月～2019年2月活動分)’ is a presentation outlining the activities of the OpenChain Japan Work Group with respect to dedicated sub-groups. This is a record showing how a purely volunteer group has built a strong community focused on real solutions for real businesses.
View the Slides
OpenChain Japan Planning Subgroup報告（2018年12月～2019年2月活動分）from Shane Coughlan
Summary
Outreach in Korea and improved reference material to help explain options around process content set the tone for an outward-facing, pro-active year that will see OpenChain dramatically expanding its engagement with companies around the world.
License and Trademarks
Copyright 2019 The Linux Foundation. This newsletter is licensed under the Creative Commons Attribution-NoDerivs 2.0 Generic (CC BY-ND 2.0). Please feel free to share it onwards! OpenChain is a trademark of The Linux Foundation. It may be used according to The Linux Foundation Trademark Policy and the OpenChain Terms of Use. All other trademarks belong to their respective owners.
