Tools for developers to ensure legal integrity of their code - Antelink OWF
Upcoming SlideShare
Loading in...5
×
 

Tools for developers to ensure legal integrity of their code - Antelink OWF

on

  • 1,416 views

 

Statistics

Views

Total Views
1,416
Views on SlideShare
312
Embed Views
1,104

Actions

Likes
2
Downloads
15
Comments
0

4 Embeds 1,104

http://www.antelink.com 550
http://www.antelink.com 550
http://preprod2.antelink.com 3
http://antelink 1

Accessibility

Categories

Upload Details

Uploaded via as Adobe PDF

Usage Rights

CC Attribution-NonCommercial LicenseCC Attribution-NonCommercial License

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Tools for developers to ensure legal integrity of their code - Antelink OWF Tools for developers to ensure legal integrity of their code - Antelink OWF Presentation Transcript

  • Tools for developers to ensure legal integrity of their codeFreddy Munoz, PhD freddy.munoz@antelink.comProduct Manager, Antelink. @drfmunozBruno CornecOpen Source & Linux Profession Bruno.Cornec@hp.comLead EMEA, HPIntelCo.
  • The context
  • The problemare you sure that you In your productknow everything…? ??? compile test analysis integration test package Product Build Engineer Final product ??? In your BoM license? version? project? are you sure that you are license compliant? 3
  • Available compliance tools (non-exhaustive list) Antepedia Antepedia Antepedia Notifier Notifier Reporter Source code Binary packageSource http://www.linuxfoundation.org/programs/legal/compliance/tools 4
  • Antepedia Tool Suite 5
  • Antepedia Tool Suit Antepedia 940 000 projects Knowledge 210 000 000 files Base Public APIAntepedia* Antepedia*Notifier Reporter Antepedia** Search ** free public access 6 * free for non-profit projects and organizations
  • Antepedia SearchSingle file Cloud service Web-browser report Original project License information Release date and location 7
  • Antepedia Reportermy.antepedia.com Antepedia — the world’s Largest Knowledge Base of open source projects 1. HTML file Export Antepedia Reporter 2. CSV File Analysis Automated On-demand Detection of Open Source Components 8
  • 9
  • Antepedia Notifier Antepedia, the world’smy.antepedia.com largest database of open source projects Continuous detection 1. By MAIL Notification 2. Through Antepedia Notifier Atlassian JIRA Automated Continuos Detection of Open Source Components 10
  • FOSSology - GoalFOSS-ology : The study of FOSSThe goal of the FOSSology project is createtools and a framework to reduce fear,uncertainty, and doubt in the use,development, and distribution of open sourcesoftware.FOSSology is a static analysis framework tolearn what we can by scanning FOSS itself.Analyze the code, save the results in adatabase, report results through a Web (orscripted) interface.
  • A Simple FOSSology Process Flowo Scan every single file in a package (or distro, or …)o Fuzzy match against a library of > 400 known licenses.o Examine the non-matching portions looking for text that could be an unknown license.o Nomos, the now GPLed license analysis tool, is the result of 10+ years of scanning @HP
  • File upload screenshot
  • Queue management screenshot
  • License analysis screenshot
  • Meta data analysis screenshot
  • Bucket browser screenshot
  • Architecture
  • Web Resources FOSSOlogy main site http://www.fossology.org Mailing Lists, contacts http://fossology.org/contact_us Plume details http://www.projet-plume.org/fiche/fossology Project-Builder http://trac.project-builder.org Open Source at HP http://opensource.hp.com ProLiant & Linux http://www.hp.com/go/proliantlinuxFOSSology users: HP, ALU, Siemens, “The evolution of FLOSS INRIA, OW2 and the Internet are tightly coupled”
  • SPDX: Handling Heterogeneous Licenses 20
  • 21
  • Inconsistent License Information (1/2)http://sourceforge.net/projects/jwebmail/ http://jwebmail.sourceforge.net/about.html http://jwebmail.sourceforge.net/news.html 22
  • InconsistentSource http://sourceforge.net/projects/winpenpack/ License Information (2/2) Source http://www.winpenpack.com/en/page.php?5 23
  • 24
  • SPDX: StandardizationSPDX™ - A standard format forcommunicating the components,licenses and copyrightsassociated with a softwarepackage. 25
  • 26
  • ??? 27