The SPDX workgroup, operating under the Linux Foundation, has created the Software Package Data Exchange (SPDX), a specification that defines a standard format for communicating the components, copyrights, licenses, and other important facts about a software package. Adoption of SPDX will enable license compliance with minimal cost across the software supply chain and help facilitate further adoption of open source software. SPDX 1.0 was launched a year ago. This panel will include representatives of the SPDX business, technical, and legal working groups and provide an update on the current status of SPDX including the recent release of version 1.1, the current state of adoption, and a view of what's coming in the next release.
This presentation is targeted at all members of the software supply chain from original developers to end users and we welcome your input.
