Tools for developers to ensure legal integrity of their code - Antelink OWF
Upcoming SlideShare
Loading in...5

Tools for developers to ensure legal integrity of their code - Antelink OWF






Total Views
Views on SlideShare
Embed Views



4 Embeds 1,104 550 550 3
http://antelink 1



Upload Details

Uploaded via as Adobe PDF

Usage Rights

CC Attribution-NonCommercial LicenseCC Attribution-NonCommercial License

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
Post Comment
Edit your comment

Tools for developers to ensure legal integrity of their code - Antelink OWF Tools for developers to ensure legal integrity of their code - Antelink OWF Presentation Transcript

  • Tools for developers to ensure legal integrity of their codeFreddy Munoz, PhD freddy.munoz@antelink.comProduct Manager, Antelink. @drfmunozBruno CornecOpen Source & Linux Profession Bruno.Cornec@hp.comLead EMEA, HPIntelCo.
  • The context
  • The problemare you sure that you In your productknow everything…? ??? compile test analysis integration test package Product Build Engineer Final product ??? In your BoM license? version? project? are you sure that you are license compliant? 3
  • Available compliance tools (non-exhaustive list) Antepedia Antepedia Antepedia Notifier Notifier Reporter Source code Binary packageSource 4
  • Antepedia Tool Suite 5
  • Antepedia Tool Suit Antepedia 940 000 projects Knowledge 210 000 000 files Base Public APIAntepedia* Antepedia*Notifier Reporter Antepedia** Search ** free public access 6 * free for non-profit projects and organizations
  • Antepedia SearchSingle file Cloud service Web-browser report Original project License information Release date and location 7
  • Antepedia Antepedia — the world’s Largest Knowledge Base of open source projects 1. HTML file Export Antepedia Reporter 2. CSV File Analysis Automated On-demand Detection of Open Source Components 8
  • 9
  • Antepedia Notifier Antepedia, the world’ largest database of open source projects Continuous detection 1. By MAIL Notification 2. Through Antepedia Notifier Atlassian JIRA Automated Continuos Detection of Open Source Components 10
  • FOSSology - GoalFOSS-ology : The study of FOSSThe goal of the FOSSology project is createtools and a framework to reduce fear,uncertainty, and doubt in the use,development, and distribution of open sourcesoftware.FOSSology is a static analysis framework tolearn what we can by scanning FOSS itself.Analyze the code, save the results in adatabase, report results through a Web (orscripted) interface.
  • A Simple FOSSology Process Flowo Scan every single file in a package (or distro, or …)o Fuzzy match against a library of > 400 known licenses.o Examine the non-matching portions looking for text that could be an unknown license.o Nomos, the now GPLed license analysis tool, is the result of 10+ years of scanning @HP
  • File upload screenshot
  • Queue management screenshot
  • License analysis screenshot
  • Meta data analysis screenshot
  • Bucket browser screenshot
  • Architecture
  • Web Resources FOSSOlogy main site Mailing Lists, contacts Plume details Project-Builder Open Source at HP ProLiant & Linux users: HP, ALU, Siemens, “The evolution of FLOSS INRIA, OW2 and the Internet are tightly coupled”
  • SPDX: Handling Heterogeneous Licenses 20
  • 21
  • Inconsistent License Information (1/2) 22
  • InconsistentSource License Information (2/2) Source 23
  • 24
  • SPDX: StandardizationSPDX™ - A standard format forcommunicating the components,licenses and copyrightsassociated with a softwarepackage. 25
  • 26
  • ??? 27