Open Source and ISO Standards - OpenChain and the Future of Compliance
summary
OpenChain becomes the formal ISO standard ISO 5230 (OpenChain) after a de facto release in October 2016 and ISO publication in December 2020, with the Joint Development Foundation fast-tracking conversion in about nine months; SPDX follows as ISO 5962 (SPDX). Adoption includes automotive bundles like Scania’s STD4589 and Toyota TPS PPP15001A. The project ships a 1,000+ document library, runs an automation/interoperability case study Sep–Dec 2021, and treats compliance as a mostly solved process-management problem.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:27Context
- 3:16Simple Thoughts
- 9:18OpenChain in Automotive
- 13:20Open Source License Compliance
- 17:19Future of OpenChain
- 20:34Open Source Compliance
related talks
17mUnderstanding How OpenChain ISO/IEC 5230 and ISO/IEC 18974 Support InnerSource
06mNew OpenChain Security Standard
37mToyota's Road to OSPO and It's Destination
20mUnderstand Why Open Source Process Management Matters To InnerSource
54mHow The LF Standards For License Compliance And Security Will Fix Your Supply Chain
42mA Milestone for Open Source Security: How the Brand New ISO 18974 Certification Looks Like and Why the ISO 5230 Supports as a Stepping Stone
50mTowards Quality SBOMs: The OpenChain Telco SBOM Guide
31mTelco Supply Chain Security: Implementing ISO 18974 & SBOM