In this working session we will do a deeper dive on the various tools (both open source and commercial) for producing and consuming SPDX 2.1. Bring your tools, bring your ideas for tools, and be prepared to roll up your sleeves and get your hands dirty with SPDX fields.
In order to facilitate discussion and collaboration we encourage SPDX producers to generate SPDX 2.1 data files (tag:value format) for a selection of open source projects prior to the meeting. There will be a standard set of packages to be analyzed, which will be documented in the SPDX 2.1 bakeoff folder on Google Docs. Before the session you may upload your data files to the folder on Google Docs. Just create a folder with the name of your organization and deposit whatever files you have. We will have several projectors in order to facilitate side-by-side comparisons of SPDX data during the meeting.
We hope to accomplish the following in this session:
- Discuss and resolve different interpretations of the SPDX specification and data fields.
- Identify and discuss bugs or gaps in the specification and ideas on how to address those in future versions of the specification.
- Demo or discuss additional tools, resources, or best practices beyond the specification that will be required in order to promote adoption of SPDX.
This session will be of primary interest to SPDX tool developers, users of those tools (corporations and open source developers/projects), SPDX specification developers and other members of the SPDX working groups.
