Surprise of the day:

Presence of the International Committee of the Red Cross at the FOSS license and security compliance tools workshop.

https://workshop.aboutcode.org/

They explained that they use #Linux and #FOSS. Because of their specific, highly distributed, use case, they have their own approach to license compliance (via SSH).

Some weeks ago I mentioned I was brewing something relevant to #JS and #CSS and #FOSS license compliance – now here it is

I propose using #REUSE / #SPDX Snippet Tags in a slightly inventive way to tag front-end code, so the information stays in-line even after minification. I present some limited PoC and ask for testers, more PoC and feedback.

https://matija.suklje.name/persistent-copyright-licensing-information-in-client-side-javascript-css-and-similar-a-proposal-call-for-help

My proposal leans solely on already existing specs and tools.

I may have something brewing …

This is really cool – finally a public collaboratively maintained repo of #SPDX documents about #FOSS components. If it takes off and people actually contribute to it too, this could make FOSS license compliance much easier.

Sharing is caring, and reusing is a must :)

https://osselot.org/