LG Electronics (LG) now has an OpenChain Security Assurance Specification 1.1 (ISO/IEC DIS 18974) conformant program. This standard defines the key requirements of a quality open source security assur

Our Education Work Group call will take place today at 15:00 UTC (08:00 PDT / 17:00 CEST). Due to an unexpected commitment Nathan will not attend, so I will lead the discussion. We will be focusing on

Google have opened their deps.dev API, covering dependencies, license information and vulnerabilities. Right now, it's open and free to use – you don't even need an API key. Blog post here: https://se

My apologies for being a little slow to distribute this recording and outcomes. This time around we focused on editing the OpenChain license compliance specification. This is the potential future upda

Check out the minutes, outcomes and recordings here: https://www.openchainproject.org/news/2023/04/12/telco-work-group-morning-and-afternoon-2023-04-06 Key point: The draft telco SBOM usage specificat

OpenChain Legal Work Group This will be the first call of the OpenChain Legal Work Group. We will explore model provisions for including OpenChain ISO/IEC 5230 and OpenChain ISO/IEC DIS 18974 (and pot

Hi Shane, That works for me too. Thank you! Best regards, Giovanna Giovanna​ H. Fessenden Of CounselHamilton, Brook, Smith & Reynolds, P.C.530 Virginia Road, Concord, MA 01742 t. 978.202.3466Giovanna.

The OpenChain Industry Survey 2023 continues to provide interesting results. We are collecting submissions until end of April, but here is a snapshot of some current responses around the topic of how

Works for me. But IANAL… From: legal-wg@... <legal-wg@...> on behalf of Shane Coughlan <scoughlan@...> Date: Wednesday, 12 April 2023 at 11:58 To: legal-wg@... <legal-wg@...> Cc: OpenChain Main <main@

As a subsidiary of SAIC Group, SAIC Z-ONE Technology Co., Ltd always adheres to the research and development of smart car technology, provides customers with trustworthy and competitive solutions, pro

Dear all Flagging that our regular second Thursday Education Work Group meeting will take place on hour earlier (08:00 PDT) due to a scheduling conflict for Nathan. Agenda will be - as always - work o

OpenChain Education Work Group Call This is the regular bi-weekly OpenChain Education Work Group Call. It takes place on the 2nd and 4th Thursday of each month, usually at 09:00 Pacific, but with occa

Ahead of the meeting today, please find attached a thinking tool / conversation starter about how we can approach the landscape. The question is “how do we go from having explanations and definitions

Dear all A reminder that our first Wednesday automation work group meeting takes place today at 08:00 UTC. We will be discussing the tool chain and what is missing. Our goal is to map out end-to-end o

Dear all A reminder that our regular North America / Europe monthly call will take place today (2023-04-04, 1st Tuesday) at 09:00 Pacific. That translates to 09:00 PDT / 16:00 UTC / 18:00 CEST / 00:00

CAICT and OpenChain held an OSCAR Open Source Supply Chain Salon on the 3rd of April 2023 with ISO/IEC 5230 third-party conformance announcements from: Alibaba Cloud Computing Ltd. China Mobile (Suzho

The OpenChain Industry Survey 2023 is now live. Help create a snapshot of the current market and help direct community resources and energy throughout 2023. We will post the results in May. Learn more

Our 50th webinar featured Alexios Zavras, Chief Open Source Compliance Officer at Intel Corporation and a long-term friend and collaborator around the OpenChain Project. This time the topic was SPDX 3

The OpenChain Project is launching a Legal Work Group with a focus on a regular industry request: model provisions for agreements. Companies have asked for templates with simple language to support th

OpenChain Webinar #50 - An Overview of SPDX 3.0 09:00 CEST (07:00 UTC) 2023-03-31 Our 50th webinar will feature Alexios Zavras, Chief Open Source Compliance Officer at Intel Corporation and a long-ter