The SPDX License List: What, Why and How
Talkat Open Source Summit North America 2022 · on Wednesday, 2022-06-22· at 13:45· Room 301/302 (Level 3), JW Marriott Austin, 110 E 2nd Street Austin, TX 78701·
summary
Community-curated machine-readable list that assigns stable identifiers and templated texts to about 500+ licenses and exceptions, produced from a single license-list XML repo (XML + text files), validated by CI and published as a website and data artifacts; includes license refs for custom/nonlisted licenses, explicit matching guidelines and inclusion principles to avoid duplicate IDs, and active legal/tech maintenance (biweekly reviews); widely adopted patterns show up in projects like the Linux kernel.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:37What specifically is the SPDX License List?
- 4:42What isn't the SPDX License List?
- 20:47Why are the Matching Guidelines relevant?
- 23:23How is the SPDX License List developed?
- 27:53License templating
related talks
10mSPDX for Better License Statements
53mAdvancing Transparency and Security in Software: A Deep Dive into SBOM and SPDX
16mSPDXv3: Advancing Transparency in Software
26mSPDX Dashboard
33mREUSE: Making Free Software Licensing Easier For All
53mTooling Up for SPDX Software Package Data Exchange
46mAdvancing Transparency and Security in Software: A Deep Dive Into SPDXv3
49mLicensing Support by Build Systems and What Remains To Be Done