Introductions and first contribution


Roberto Di Cosmo
 

Dear all,
I'm very grateful to Shane for suggesting to join the OpenChain mailing
list, and delighted to participate in this essential effort to create common
standards for all open source compliance work.

At Software Heritage, our mission is to collect, preserve and share the source
code of all software ever written (more at www.softwareheritage.org), building a
universal archive and knowledge base that has a variety of applications.

One of these applications is directly related to compliance, and I believe it
may be interesting for OpenChain: it builds on Software Heritage as a mutualised
infrastructure to provide a standard mechanism for satisfying source code
distribution obligations.

A full presentation of this particular application has been delivered at FOSDEM
this year by Alexios Zavras and Stefano Zacchiroli, who imagined and developed
it; slides and videos of the talk are available online here:

https://fosdem.org/2018/schedule/event/outsourcing_distribution_requirements/

Unfortunately, the CC-BY annotation did not made it into the online version of
the slides, but I'm sure Alexios and Stefano (on this list) will be delighted to
confirm you can reuse/redistribute this material.

Looking forward to fruitful collaborations!

Cheers

--
Roberto

------------------------------------------------------------------
Computer Science Professor
(on leave at INRIA from IRIF/University Paris Diderot)

Director
Software Heritage E-mail : roberto@...
INRIA Web : http://www.dicosmo.org
Bureau C123 Twitter : http://twitter.com/rdicosmo
2, Rue Simone Iff Tel : +33 1 80 49 44 42
CS 42112
75589 Paris Cedex 12
------------------------------------------------------------------
GPG fingerprint 2931 20CE 3A5A 5390 98EC 8BFC FCCA C3BE 39CB 12D3


Shane Coughlan <coughlan@...>
 

Welcome Roberto!

First of all, it is terrific to have the opportunity to work with Software Heritage. The resource you are creating to provide a record and context for code is invaluable. I hope that we can communicate and collaborate on several fronts throughout this year.

Using Software Heritage as infrastructure to provide a standard mechanism for satisfying source code distribution obligations requirements is intriguing. Alexios, Stefano, would it be possible to contribute them under CC-0 to the OpenChain curriculum reference library? I believe it may fit into a stand-alone slide deck explaining one possible approach for source code distribution.

By the way, for those not familiar with it, you can learn more about Software Heritage here:
https://www.softwareheritage.org
Some great companies are supporting the initiative, including Microsoft, Intel, Google and our very own GitHub.

Regards

Shane

On Jul 10, 2018, at 22:02 , Roberto Di Cosmo <roberto@...> wrote:

Dear all,
I'm very grateful to Shane for suggesting to join the OpenChain mailing
list, and delighted to participate in this essential effort to create common
standards for all open source compliance work.

At Software Heritage, our mission is to collect, preserve and share the source
code of all software ever written (more at www.softwareheritage.org), building a
universal archive and knowledge base that has a variety of applications.

One of these applications is directly related to compliance, and I believe it
may be interesting for OpenChain: it builds on Software Heritage as a mutualised
infrastructure to provide a standard mechanism for satisfying source code
distribution obligations.

A full presentation of this particular application has been delivered at FOSDEM
this year by Alexios Zavras and Stefano Zacchiroli, who imagined and developed
it; slides and videos of the talk are available online here:

https://fosdem.org/2018/schedule/event/outsourcing_distribution_requirements/

Unfortunately, the CC-BY annotation did not made it into the online version of
the slides, but I'm sure Alexios and Stefano (on this list) will be delighted to
confirm you can reuse/redistribute this material.

Looking forward to fruitful collaborations!

Cheers

--
Roberto

------------------------------------------------------------------
Computer Science Professor
(on leave at INRIA from IRIF/University Paris Diderot)

Director
Software Heritage E-mail : roberto@...
INRIA Web : http://www.dicosmo.org
Bureau C123 Twitter : http://twitter.com/rdicosmo
2, Rue Simone Iff Tel : +33 1 80 49 44 42
CS 42112
75589 Paris Cedex 12
------------------------------------------------------------------
GPG fingerprint 2931 20CE 3A5A 5390 98EC 8BFC FCCA C3BE 39CB 12D3
_______________________________________________
OpenChain mailing list
OpenChain@...
https://lists.linuxfoundation.org/mailman/listinfo/openchain


Roberto Di Cosmo
 

Dear Shane,
thanks for the warm welcome, we are very excited to collaborate with
OpenChain, and we are also engaged in fostering adoption of good practices
developed by many on this list into other areas, like scientific research.

For example, we convinced the national french scientific open access portal,
HAL (see e.g. hal.inria.fr), to adopt the official SPDX licence list in the
software deposit service that will be generalised to all of France this fall:
researchers that deposit software will be able to choose the licence(s) of
their deposit in a drop down list build out of the SPDX reference list,
and the deposited software will be archived into Software Heritage.

All the best

--
Roberto

On Wed, Jul 11, 2018 at 09:10:06AM +0900, Shane Coughlan wrote:
Welcome Roberto!

First of all, it is terrific to have the opportunity to work with Software Heritage. The resource you are creating to provide a record and context for code is invaluable. I hope that we can communicate and collaborate on several fronts throughout this year.

Using Software Heritage as infrastructure to provide a standard mechanism for satisfying source code distribution obligations requirements is intriguing. Alexios, Stefano, would it be possible to contribute them under CC-0 to the OpenChain curriculum reference library? I believe it may fit into a stand-alone slide deck explaining one possible approach for source code distribution.

By the way, for those not familiar with it, you can learn more about Software Heritage here:
https://www.softwareheritage.org
Some great companies are supporting the initiative, including Microsoft, Intel, Google and our very own GitHub.

Regards

Shane

On Jul 10, 2018, at 22:02 , Roberto Di Cosmo <roberto@...> wrote:

Dear all,
I'm very grateful to Shane for suggesting to join the OpenChain mailing
list, and delighted to participate in this essential effort to create common
standards for all open source compliance work.

At Software Heritage, our mission is to collect, preserve and share the source
code of all software ever written (more at www.softwareheritage.org), building a
universal archive and knowledge base that has a variety of applications.

One of these applications is directly related to compliance, and I believe it
may be interesting for OpenChain: it builds on Software Heritage as a mutualised
infrastructure to provide a standard mechanism for satisfying source code
distribution obligations.

A full presentation of this particular application has been delivered at FOSDEM
this year by Alexios Zavras and Stefano Zacchiroli, who imagined and developed
it; slides and videos of the talk are available online here:

https://fosdem.org/2018/schedule/event/outsourcing_distribution_requirements/

Unfortunately, the CC-BY annotation did not made it into the online version of
the slides, but I'm sure Alexios and Stefano (on this list) will be delighted to
confirm you can reuse/redistribute this material.

Looking forward to fruitful collaborations!

Cheers

--
Roberto

------------------------------------------------------------------
Computer Science Professor
(on leave at INRIA from IRIF/University Paris Diderot)

Director
Software Heritage E-mail : roberto@...
INRIA Web : http://www.dicosmo.org
Bureau C123 Twitter : http://twitter.com/rdicosmo
2, Rue Simone Iff Tel : +33 1 80 49 44 42
CS 42112
75589 Paris Cedex 12
------------------------------------------------------------------
GPG fingerprint 2931 20CE 3A5A 5390 98EC 8BFC FCCA C3BE 39CB 12D3
_______________________________________________
OpenChain mailing list
OpenChain@...
https://lists.linuxfoundation.org/mailman/listinfo/openchain
--
Roberto Di Cosmo

------------------------------------------------------------------
Computer Science Professor
(on leave at INRIA from IRIF/University Paris Diderot)

Software Heritage E-mail : roberto@...
INRIA Web : http://www.dicosmo.org
Bureau C123 Twitter : http://twitter.com/rdicosmo
2, Rue Simone Iff Tel : +33 1 80 49 44 42
CS 42112
75589 Paris Cedex 12
------------------------------------------------------------------
GPG fingerprint 2931 20CE 3A5A 5390 98EC 8BFC FCCA C3BE 39CB 12D3


Kate Stewart
 

Hi Roberto!

On Wed, Jul 11, 2018 at 1:10 PM, Roberto Di Cosmo <roberto@...> wrote:
Dear Shane,
     thanks for the warm welcome, we are very excited to collaborate with
OpenChain, and we are also engaged in fostering adoption of good practices
developed by many on this list into other areas, like scientific research.

For example, we convinced the national french scientific open access portal,
HAL (see e.g. hal.inria.fr), to adopt the official SPDX licence list in the
software deposit service that will be generalised to all of France this fall:
researchers that deposit software will be able to choose the licence(s) of
their deposit in a drop down list build out of the SPDX reference list,
and the deposited software will be archived into Software Heritage.

That's super cool - thank you!   ok for me to cross post this on the spdx
general list?    There others there that will find it intresting as well.

Kate


Roberto Di Cosmo
 

Hi Kate,
sure, go ahead!

The only caveat is that currently the only way to spot SPDX at work is to
actually go through the process of depositing a software source code on
https://hal.inria.fr/ and start typing the name of a licence in the appropriate
text field in a (long) form (and you need to create an account, and follow the
instructions show here: bit.ly/swhdepositen ...)

We should definitely plan a joint communication when the service is open across
France (planned for end of September): who would be the right PR contact
on your side?

--
Roberto

On Wed, Jul 11, 2018 at 01:30:22PM -0500, Kate Stewart wrote:
Hi Roberto!

On Wed, Jul 11, 2018 at 1:10 PM, Roberto Di Cosmo <roberto@...> wrote:

Dear Shane,
     thanks for the warm welcome, we are very excited to collaborate with
OpenChain, and we are also engaged in fostering adoption of good practices
developed by many on this list into other areas, like scientific research.

For example, we convinced the national french scientific open access
portal,
HAL (see e.g. hal.inria.fr), to adopt the official SPDX licence list in the
software deposit service that will be generalised to all of France this
fall:
researchers that deposit software will be able to choose the licence(s) of
their deposit in a drop down list build out of the SPDX reference list,
and the deposited software will be archived into Software Heritage.


That's super cool - thank you!   ok for me to cross post this on the spdx
general list?    There others there that will find it intresting as well.

Kate
--
Roberto Di Cosmo

------------------------------------------------------------------
Computer Science Professor
(on leave at INRIA from IRIF/University Paris Diderot)

Software Heritage E-mail : roberto@...
INRIA Web : http://www.dicosmo.org
Bureau C123 Twitter : http://twitter.com/rdicosmo
2, Rue Simone Iff Tel : +33 1 80 49 44 42
CS 42112
75589 Paris Cedex 12
------------------------------------------------------------------
GPG fingerprint 2931 20CE 3A5A 5390 98EC 8BFC FCCA C3BE 39CB 12D3


Stefano Zacchiroli
 

Hi Shane, all, thanks for the warm welcome!

On Wed, Jul 11, 2018 at 09:10:06AM +0900, Shane Coughlan wrote:
Using Software Heritage as infrastructure to provide a standard
mechanism for satisfying source code distribution obligations
requirements is intriguing. Alexios, Stefano, would it be possible to
contribute them under CC-0 to the OpenChain curriculum reference
library? I believe it may fit into a stand-alone slide deck explaining
one possible approach for source code distribution.
as it happens I've met today with Alexios who (I found out today :)) is
also the curriculum chairman. We both prefer CC-BY-SA as license for
slides, which makes them not suitable for the curriculum library. But we
agree with you that some material about how to deposit CCSC tarballs to
Software Heritage should make its way to the curriculum library. We'll
be working on this, release it under CC0, and submit it for
consideration for the library.

Cheers
--
Stefano Zacchiroli . zack@... . upsilon.cc/zack . . o . . . o . o
Computer Science Professor . CTO Software Heritage . . . . . o . . . o o
Former Debian Project Leader & OSI Board Director . . . o o o . . . o .
« the first rule of tautology club is the first rule of tautology club »


Shane Coughlan <coughlan@...>
 

Hi Stefano!

On Jul 12, 2018, at 22:38 , Stefano Zacchiroli <zack@...> wrote:

Hi Shane, all, thanks for the warm welcome!

On Wed, Jul 11, 2018 at 09:10:06AM +0900, Shane Coughlan wrote:
Using Software Heritage as infrastructure to provide a standard
mechanism for satisfying source code distribution obligations
requirements is intriguing. Alexios, Stefano, would it be possible to
contribute them under CC-0 to the OpenChain curriculum reference
library? I believe it may fit into a stand-alone slide deck explaining
one possible approach for source code distribution.
as it happens I've met today with Alexios who (I found out today :)) is
also the curriculum chairman. We both prefer CC-BY-SA as license for
slides, which makes them not suitable for the curriculum library. But we
agree with you that some material about how to deposit CCSC tarballs to
Software Heritage should make its way to the curriculum library. We'll
be working on this, release it under CC0, and submit it for
consideration for the library.
Works for me! Thanks for taking this forward and building out a new contribution for the OpenChain Project. I am positive it will be immediately useful for our members. Great start to collaboration between OpenChain / Software Heritage :)

Regards

Shane



--
Shane Coughlan
General Manager, OpenChain
e: coughlan@...
p: +81 (0) 80 4035 8083
w: www.openchainproject.org

Professional profile: http://www.linkedin.com/in/shanecoughlan

Get my free book on open source compliance here:
https://www.linuxfoundation.org/news-media/research/practical-gpl-compliance