Back to Programs

Other

SPDX

An open ISO standard for SBOMs

gojavajsonpythonrdf

Participation history

7 GSoC years

2023

3 projects

Official year page

Enhancing the SPDX License Submission Online Tool: Improving Streamlined License Compliance

This project aims to enhance the SPDX Online Tool by improving its functionality and efficiency for license submissions. The project proposes adding...

SoftWare Heritage SPDX generation : Generate SPDX documents from Software Heritage Identifiers.

The SoftWare Heritage provides each part of the archive (be it any single file, directory or collection of lines of code) or archive itself a stable...

Fixing manifest parsers for SBOM generator

The spdx-sbom-generator tool helps generating SBOM information complying with the SPDX standard and relies heavily on the parsers project. This GSoC...

2022

2 projects

Official year page

SBOM Conformance Checker Proposal

The minimum constituent parts of an overall Software Bill of Material (SBOM) – referred to as NTIA’s minimum elements – are three broad, interrelated...

A Scalable, Secure and Service-Oriented Private License Management System

The project involves web-based system for managing license texts; similar to the SPDX License List but oriented towards other private collections of...

2021

4 projects

Official year page

Fast and Precise License Matching Library

Detecting the contents of license documents is a major task for software that automatically analyzes software metadata, such as package managers. OSS...

Validate and Generate multiple representations of Specifications

This project aims to build a program that end users can use as: Validating and reporting all possible parsing errors (in any) in the incoming...

JSON Support for Golang libraries

After the introduction of SPDX Specifications v2.2 JSON, YAML, and a development version of XML had been added as supported file formats. However ,...

MIGRATE SPDX ONLINE TOOLS TO DJANGO 3

Since we have a working python 3 branch for SPDX Online Tools, it is necessary to keep the app updated to latest Django versions and at the same time...

2020

4 projects

Official year page

Validate License Cross-References

Enhance the SPDX LicenseListPublisher to validate the cross reference / seeAlso URL's for the license. One check would be to validate the link is...

Generate Java SPDX Model Classes from XML XSD file.

The project aims at generating the Java Model Classes for proposed XML XSD files of repositories. This involves mapping the elements of XML Schema to...

Concurrent RDF Parser in GoLang

The project focuses on building a GoLang RDF reader in native GoLang which not only would be useful for the SPDX community but also might help the...

SPDX Plugins for Package Managers

Create a native plug-in or extension to a well-known package manager to generate valid SPDX documents based on the information provided in the build...

2019

8 projects

Official year page

Additional Format Support for the Python Libraries

Due to its need to programmatically handle SPDX Documents, SPDX has developed Python tools that parse and write SPDX Documents in RDF and TAG/VALUE...

Enhance workflow for Online license request

The aim of this proposal is to extend the functionalities of the new license requests submittal by adding checks for duplicate license requests and...

SPDX Specification in PDF and HTML

The primary objective of the project is to generate both HTML and PDF versions of the SPDX Specification from markdown. The HTML and PDF version will...

SPDX Specification in PDF and HTML

The 2.1 SPDX specification source files exist in markdown and now generates an HTML version The goal in this GSoC will be to find an approach to...

Porting the SPDX libraries to JavaScript/Node

This project will focus on implementing a JavaScript library to parse, validate and create SPDX documents. This library will implement an SPDX...

SPDX Document Generator for projects using SPDXIDs

Forward thinking open source projects are adopting SPDXIDs in source files (initially U-Boot, but now much wider use like Zephyr, Linux Kernel, etc.)...

Registry for License List Namespaces

SPDX provides a license list for commonly used open source license - the SPDX License List. SPDX also supports defining licenses within the SPDX...

Upgrade Parser Libraries for Golang

The project tools-golang is a set of packages in Golang intended to assist the programmers of Go language to work with SPDX files. At Present, the...

2018

4 projects

Official year page

Build tool SPDX file generators

Support a continuous integration (CI) generation of SPDX files by creating a plugins or extensions to build tools. These plugins or extensions will...

Update Python SPDX library to SPDX 2.1

Software Package Data Exchange (SPDX) is “a set of standards for communicating the components, licenses, and copyrights associated with software”....

Add New License Submittal Feature to Online Tools

The aim of this project is to design and develop new features to an existing SPDX web application (https://github.com/spdx/spdx-online-tools), that...

Add a License XML Editor to the Online Tools

All the licenses of the SPDX License List are stored in the license-list-XML repository in XML format. So, creating or editing an XML license is a...

2017

4 projects

Official year page

Online Validation Tools

Software Package Data Exchange (SPDX) is “a set of standards for communicating the components, licenses, and copyrights associated with software”....

Online SPDX Tool

Building an easy all-in-one portal to upload and parse SPDX documents for validation, comparison and conversion and search SPDX license list by...

License Coverage Grader

There have been several talks about the need for a package level License Coverage Grade. This project will come up with an initial set of heuristics...

GitHub Integration Proposal

Design, develop, and implement an application that, when provided with a GitHub repository's URL, generates SPDX (https://spdx.org/) documents based...