On Thu, Aug 28, 2014 at 8:39 PM, Gisi, Mark <Mark.Gisi@...> wrote:
>
> Hi Jeremiah,
>
>  
>
> >>> Secondly, I have some concern around cadence.
>
>  
>
> I am ok with either a weekly or biweekly cadence.
>
>  
>
> >>> Lastly, I'd strongly urge all of us to kill our darlings. We need to not try and chose technology winners.
>
>  
>
> I generally agree. One point I expressed at Tuesday’s meeting was that we need to focus on requirements (the what) and not specific processes or tools (the how). Different organizations will likely want to invest differently in processes and tools. As long as an organization can satisfy a standard set of requirements they should be good. We might provide example implementations or perhaps recommend certain technologies, but the effort should largely be requirements driven, and process and tool agnostic.


You said what I was trying to say, but you said it better.

>
> Taking off my OpenChain hat and putting on my SPDX hat - being one of the largest producers and consumers of SPDX data and an active participant in the SPDX working groups, I feel somewhat obliged to provide additional clarification on SPDX. I will do so in a separate email thread to avoid distracting from the spirit of your points.

I look very much forward to hearing about your experience because tooling is something that is surely going to be important and WR's experience here is highly relevant. Thank you very much.