Webinar: OpenSCA
This webinar highlights a new open source tool for open source compliance and security that originates in China. This tool was created by a company called XMIRROR. The open source CLI offers SPDX support, so is immediate interest to tooling communities around the world, particularly from the perspective of integration…
Webinar: An Update On ClearlyDefined
This webinar features an update on ClearlyDefined by Nick Vidal at the Open Source Initiative (OSI). A lot has happened since we last covered this project for open source metadata, including the move to a new home at OSI. About The Project ClearlyDefined and its parent organization, the Open Source Initiative,…
Webinar: An Overview of SPDX 3.0
This webinar features Alexios Zavras, Chief Open Source Compliance Officer at Intel Corporation and a long-term friend and collaborator around the OpenChain Project. This time the topic was SPDX 3.0, a significant generational update to SPDX, a sister standard to OpenChain ISO/IEC 5230 and OpenChain ISO/IEC DIS 18974. SPDX is…
Webinar: GPLv2 Licensing History
This OpenChain Webinar features an overview of GPLv2 licensing fragmentation based on research initiated by Philippe Ombredanne of NexB and continued by Armijn Hemel of Tjaldur Software Governance Solutions. The key takeaway is that a significant number of variations exist (40 "vanilla" copies from the FSF or GNU website, 12…
Webinar: OSSelot: The Open Source Curation Database
This OpenChain Webinar features OSSelot, an open source curation database recently launched by OSADL in Germany. This project addresses one of the most requested features around open source automation for open source compliance: an open, public database supporting SBOM (via SPDX ISO/IEC 5962) for common software packages. This could be a…
Webinar: Challenges and Opportunities for SCA Vendors in China + Quantifying Open Source Risk in M&A
This webinar explores how SCA and tooling vendors in China are addressing the local market, and how open source risk can be managed around M&A. https://youtu.be/3Da5jKw7fRY Check Out The Rest Of Our Webinars https://www.openchainproject.org/webinars This is OpenChain Webinar #42, released on 2022-06-14.
Webinar: FOSSLight (Korean with Chinese and Japanese Subtitles)
This webinar covers FOSSLight, a new open source project for open source license compliance from the Korean community. This is a quiet landmark for the OpenChain Project: our first non-English global webinar is presented in Korean with Simplified Chinese and Japanese subtitles. https://youtu.be/vxd6zKeeGoc There is one request that comes with…
Webinar: Semi-Automated Clearing Of Files With Proximity Matching
This webinar returned to automation topics with a review of how clearing can be made faster by using techniques like proximity matching. While approaches like this inherently depend on the technical ability of user companies, and their individual determinations of accuracy or risk, they do suggest avenues to increase efficiency-at-scale.…
Webinar: The Mulan License
This webinar unpacked the Mulan license family, an emerging activity from China with implications regarding the governance of open source as it expands around the world. Providing licenses designed in non-English languages is a topic that will be increasingly important, and is something companies will benefit from being aware of.…
Webinar: Netfilter and McHardy Settlement
This webinar provided a case study of the settlement between the Netfilter Project and Patrick McHardy, a concluding chapter of the long-running "copyright trolling" issue that had caused concern in the open source community for nearly a decade. https://youtu.be/DUGIG4VNsPw Check Out The Rest Of Our Webinars https://www.openchainproject.org/webinars This is OpenChain…