// SPDX-License-Identifier: CC-BY-ND-2.5
what if we all started using SPDX ids at the top of our posts, as a bit
what if we all started using SPDX ids at the top of our posts, as a bit
November 27, 2024 at 12:21 AM
// SPDX-License-Identifier: CC-BY-ND-2.5
what if we all started using SPDX ids at the top of our posts, as a bit
what if we all started using SPDX ids at the top of our posts, as a bit
March 15, 2025 at 10:36 AM
SPDX and openEuler team up to explore newer horizons.
Close Collaboration Between SPDX and openEuler Enables the Standard Stay More Relevant
SPDX Ambassador Gopi Krishnan shares his views on the importance of openEuler translating SPDX 3.0 in Chinese language.
news.itsfoss.com
January 18, 2025 at 9:00 AM
SPDX and openEuler team up to explore newer horizons.
SPDX-License-Identifier: AGPL-3.0-with-anime-exception
June 8, 2026 at 9:53 PM
SPDX-License-Identifier: AGPL-3.0-with-anime-exception
September 30, 2024 at 8:53 PM
🐍📦📜 All the pieces (I use) are now in place for PEP 639 ("Improving License Clarity with Better Package Metadata").
Thanks to contributors and maintainers of at least 6 projects and of course Karolina Surma for the PEP!
discuss.python.org/t/pep-639-ro...
#Python #PEP639 #PyPI #SPDX #licensing
Thanks to contributors and maintainers of at least 6 projects and of course Karolina Surma for the PEP!
discuss.python.org/t/pep-639-ro...
#Python #PEP639 #PyPI #SPDX #licensing
January 24, 2025 at 11:34 AM
🐍📦📜 All the pieces (I use) are now in place for PEP 639 ("Improving License Clarity with Better Package Metadata").
Thanks to contributors and maintainers of at least 6 projects and of course Karolina Surma for the PEP!
discuss.python.org/t/pep-639-ro...
#Python #PEP639 #PyPI #SPDX #licensing
Thanks to contributors and maintainers of at least 6 projects and of course Karolina Surma for the PEP!
discuss.python.org/t/pep-639-ro...
#Python #PEP639 #PyPI #SPDX #licensing
Today I found a tool for checking open source licenses 🔥
📜 feluda — Detect license usage restrictions in your project.
💯 Supports Rust, TS, JS, Go, Python & more!
🦀 Written in Rust & built with @ratatui.rs
⭐ GitHub: github.com/anistark/fel...
#rustlang #ratatui #tui #license #spdx #opensource
📜 feluda — Detect license usage restrictions in your project.
💯 Supports Rust, TS, JS, Go, Python & more!
🦀 Written in Rust & built with @ratatui.rs
⭐ GitHub: github.com/anistark/fel...
#rustlang #ratatui #tui #license #spdx #opensource
June 17, 2025 at 12:13 PM
Today I found a tool for checking open source licenses 🔥
📜 feluda — Detect license usage restrictions in your project.
💯 Supports Rust, TS, JS, Go, Python & more!
🦀 Written in Rust & built with @ratatui.rs
⭐ GitHub: github.com/anistark/fel...
#rustlang #ratatui #tui #license #spdx #opensource
📜 feluda — Detect license usage restrictions in your project.
💯 Supports Rust, TS, JS, Go, Python & more!
🦀 Written in Rust & built with @ratatui.rs
⭐ GitHub: github.com/anistark/fel...
#rustlang #ratatui #tui #license #spdx #opensource
Stronger security, simplified compliance. ✅
SPDX 3.0, OpenSSF Scorecard, and OpenChain are supporting open source projects in meeting CRA requirements.
🔗 Learn how: www.linuxfoundation.org/research/cra...
SPDX 3.0, OpenSSF Scorecard, and OpenChain are supporting open source projects in meeting CRA requirements.
🔗 Learn how: www.linuxfoundation.org/research/cra...
April 15, 2025 at 7:32 PM
Stronger security, simplified compliance. ✅
SPDX 3.0, OpenSSF Scorecard, and OpenChain are supporting open source projects in meeting CRA requirements.
🔗 Learn how: www.linuxfoundation.org/research/cra...
SPDX 3.0, OpenSSF Scorecard, and OpenChain are supporting open source projects in meeting CRA requirements.
🔗 Learn how: www.linuxfoundation.org/research/cra...
You could also use s different SBOM format like SPDX
April 27, 2025 at 9:07 AM
You could also use s different SBOM format like SPDX
(* itself a shorthand for "the variant of the permissive license family generally referred to by the term 'BSD licenses' that is in use primarily by the FreeBSD project, referred to by the Free Software Foundation as 'the FreeBSD license' and whose SPDX identifier is 'BSD-2-Clause'")
August 30, 2026 at 9:26 AM
(* itself a shorthand for "the variant of the permissive license family generally referred to by the term 'BSD licenses' that is in use primarily by the FreeBSD project, referred to by the Free Software Foundation as 'the FreeBSD license' and whose SPDX identifier is 'BSD-2-Clause'")
SPDX: Woke-3.0-or-later
February 3, 2026 at 1:30 PM
SPDX: Woke-3.0-or-later
🔍 Can AI be trusted? Transparency holds the key!
SPDX tracks AI model origins. AI BOM keeps AI components visible. Decentralization strengthens security. Open source is paving the way!
SPDX tracks AI model origins. AI BOM keeps AI components visible. Decentralization strengthens security. Open source is paving the way!
March 5, 2025 at 4:51 PM
🔍 Can AI be trusted? Transparency holds the key!
SPDX tracks AI model origins. AI BOM keeps AI components visible. Decentralization strengthens security. Open source is paving the way!
SPDX tracks AI model origins. AI BOM keeps AI components visible. Decentralization strengthens security. Open source is paving the way!
Today's blog post explores why the NEW PUNI ANA SPDX might be the best "torso" type ero toy ever. Read it here: jli.st/4p05jif
Sauce is Prison School.
Sauce is Prison School.
November 21, 2025 at 5:30 AM
Today's blog post explores why the NEW PUNI ANA SPDX might be the best "torso" type ero toy ever. Read it here: jli.st/4p05jif
Sauce is Prison School.
Sauce is Prison School.
SPDX SBOM Generation Tool Proposed For The Linux Kernel - https://www.phoronix.com/news/SPDX-SBOM-Gen-Tool-Linux
SPDX SBOM Generation Tool Proposed For The Linux Kernel
For those organizations on the Software Bill of Materials (SBOM) bandwagon for increasing transparency around software components with license compliance, vulnerability management, and securing the software supply chain, proposed patches to the Linux kernel would introduce an SPDX SBOM Generation Tool...
www.phoronix.com
January 19, 2026 at 11:07 AM
SPDX SBOM Generation Tool Proposed For The Linux Kernel - https://www.phoronix.com/news/SPDX-SBOM-Gen-Tool-Linux
Binarly's Alex Matrosov has launched SBOM Tools, a platform to compare and analyze SBOM files to understand software supply chain risks
sbom.tools
sbom.tools
sbom-tools — From SBOM to Insight
Semantic SBOM diff and analysis tool. Compare, validate, and assess the quality of SBOMs across CycloneDX and SPDX formats.
sbom.tools
March 1, 2026 at 1:07 AM
Binarly's Alex Matrosov has launched SBOM Tools, a platform to compare and analyze SBOM files to understand software supply chain risks
sbom.tools
sbom.tools
Elixir now meets OpenChain (ISO/IEC 5230) standards! This milestone strengthens our commitment to open source license compliance and secure development. Get the full story and see what it means for contributors and users alike:
elixir-lang.org/blog/2025/02...
elixir-lang.org/blog/2025/02...
Announcing Elixir OpenChain Certification
The Elixir project now meets OpenChain (ISO/IEC 5230). Each release ships with Source SBoMs in CycloneDX 1.6 and SPDX 2.3, plus attestation.
elixir-lang.org
February 26, 2025 at 1:06 PM
Elixir now meets OpenChain (ISO/IEC 5230) standards! This milestone strengthens our commitment to open source license compliance and secure development. Get the full story and see what it means for contributors and users alike:
elixir-lang.org/blog/2025/02...
elixir-lang.org/blog/2025/02...
Meet the System Package Data Exchange: SPDX 3.0, with Profiles: thenewstack.io/introducing-... by @sjvn.bsky.social
With #SPDX 3.0, you can track not just software packages, but pretty much anything and everything. It's a game-changer. #OSSummit #Security
With #SPDX 3.0, you can track not just software packages, but pretty much anything and everything. It's a game-changer. #OSSummit #Security
Meet the System Package Data Exchange: SPDX 3.0, with Profiles
The latest version of the newly renamed System Package Data Exchange (SPDX) was announced Tuesday at Open Source Summit North America.
thenewstack.io
April 16, 2024 at 10:44 PM
Meet the System Package Data Exchange: SPDX 3.0, with Profiles: thenewstack.io/introducing-... by @sjvn.bsky.social
With #SPDX 3.0, you can track not just software packages, but pretty much anything and everything. It's a game-changer. #OSSummit #Security
With #SPDX 3.0, you can track not just software packages, but pretty much anything and everything. It's a game-changer. #OSSummit #Security
this is what DID robotgirls have instead of a gatekeeper
April 5, 2025 at 6:46 PM
this is what DID robotgirls have instead of a gatekeeper
SPDX-License-Identifier: BSD-3-Clawbs
July 26, 2025 at 5:59 PM
SPDX-License-Identifier: BSD-3-Clawbs
[https://ow.ly/iPZ550Z8n1N] discusses SPDX 3.0 SBOM limits, urging build layer/version details for better #VulnerabilityManagement #SBOM #SPDX #BuildMetadata #OpenEmbedded #BitBake #SoftwareSecurity #Cybersecurity #DevSecOps
June 6, 2026 at 9:40 AM
[https://ow.ly/iPZ550Z8n1N] discusses SPDX 3.0 SBOM limits, urging build layer/version details for better #VulnerabilityManagement #SBOM #SPDX #BuildMetadata #OpenEmbedded #BitBake #SoftwareSecurity #Cybersecurity #DevSecOps