Dear all A reminder that our regular North America / Europe monthly call will take place today (2023-04-04, 1st Tuesday) at 09:00 Pacific. That translates to 09:00 PDT / 16:00 UTC / 18:00 CEST / 00:00

CAICT and OpenChain held an OSCAR Open Source Supply Chain Salon on the 3rd of April 2023 with ISO/IEC 5230 third-party conformance announcements from: Alibaba Cloud Computing Ltd. China Mobile (Suzho

The OpenChain Industry Survey 2023 is now live. Help create a snapshot of the current market and help direct community resources and energy throughout 2023. We will post the results in May. Learn more

Our 50th webinar featured Alexios Zavras, Chief Open Source Compliance Officer at Intel Corporation and a long-term friend and collaborator around the OpenChain Project. This time the topic was SPDX 3

The OpenChain Project is launching a Legal Work Group with a focus on a regular industry request: model provisions for agreements. Companies have asked for templates with simple language to support th

OpenChain Webinar #50 - An Overview of SPDX 3.0 09:00 CEST (07:00 UTC) 2023-03-31 Our 50th webinar will feature Alexios Zavras, Chief Open Source Compliance Officer at Intel Corporation and a long-ter

OpenChain Mini-Summit - Co-Located with Open Source Summit North America - Vancouver The OpenChain Project will host an afternoon mini-summit with a particular focus on:Open source tooling for open so

OpenChain Governing Board + Guests: Brown Bag Strategy Lunch Event This will be an informal event for the OpenChain Governing Board and invited guests to discuss strategy items related to the current

Dear all A reminder that our OpenChain Germany Work Group is having a virtual meeting today at 09:00 CEST. It will run until 11:00. All welcome. We will have presentations on tooling, SBOMs and more.

Dear all There is a printable version of the DIS 18974 self-certification checklist here: https://github.com/OpenChain-Project/Reference-Material/blob/master/Self-Certification/Checklist/DIS-18974/en/

Is this JUST for web services? The location section focuses on a fixed URL rather than, say, a location within a source repo. But then, I've barely skimmed the document. From: specification@... <speci

Jeff flagged this on our monthly call (2023-03-21) https://securitytxt.org/ It is like LICENSE files but for security. What do you think? Have you heard about this? Useful in your workflow?

OpenChain Webinar #50 - An Overview of SPDX 3.0 Our 50th webinar will feature Alexios Zavras, Chief Open Source Compliance Officer at Intel Corporation and a long-term friend and collaborator around t

Our regular monthly meeting continued our work to edit the next generation of our license compliance and security assurance specifications. Our focus this time was on some open issues around the next

The OpenChain Project is delighted to be part of the OSPO Summit held in Beijing during March 2023. You can check out our speech from the event below. https://www.openchainproject.org/news/2023/03/20/

A reminder that our monthly North America / Asia call is taking place in a five minutes: 2023-03-21 at 09:00 CST / 10:00 KST+JST (01:00 UTC). That will be 18:00 Pacific on the 20th of March for our co

Dear All A reminder that our monthly North America / Asia call is taking place tomorrow, 2023-03-21, at 09:00 CST / 10:00 KST+JST (01:00 UTC). That will be 18:00 Pacific on the 20th of March for our c

The OpenChain Security Assurance Specification 1.1 is now DIS 18974, OpenChain Security Assurance Specification. This de facto industry standard describes the key requirements of a quality open source

China Electronics Standardization Institute (CESI) is the latest official partner of the OpenChain Project. From today, CESI is offering third-party certification around the standards produced by the

(Sorry for redundancy through crossposting.) Hello everyone, I'm running out of good articles for IEEE Computer (for the open source expanded column). More information in this old call, now current ag