Project Tooling

As part of the second year of the grant, we have become actively engaged with open source communities in an effort to practice what we learned from the first year. We identified communities that hit several criteria (i.e. accessible, friendly, opportunity to contribute, Linux Foundation supported). In the end, we decided to participate with both the FOSSology and SPDX communities. FOSSology is an open source application that scans software packages to identify licensing requirements. SPDX is an open source standard that is used to articulate the licences in a software package, much like a bill of materials used for physical materials.

In an effort to be community members, we focused on tooling for both open source ecosystems, all under the umbrella of SPDX Tools. In this effort, we have developed:

1) FOSSology + SPDX => An open source tool used to produce SPDX documents from FOSSology scans.

2) FOSSology Dashboard => An open source tool used to analyze and compare SPDX documents.

Leave a comment