search

openSUSE / cavil

The legal review and SBOM system used by SUSE and openSUSE
GNU General Public License v2.0
35 stars 6 forks source link

RFE: Sharing and Re-using OSS Compliance infromation #64

Open lkocman opened 1 year ago

lkocman commented 1 year ago

Hello

this is just a quick thought from Today's Open Chain webinar by Caren Kresse about OSSelot: The Open Source Curation Database

Project site: See https://osselot.org/ Videos: https://www.osselot.org/index.php?s=videos

Could we extend or reuse existing analysed data as part of our legal review process? https://github.com/Open-Source-Compliance

Seems like the process utilizes Fossology for the scan.

Data: https://github.com/Open-Source-Compliance/package-analysis/tree/main/analysed-packages

The DB grows with every day and it seem to be a way how to get an extra curator (Oliver reviews PRs). package_growth

lkocman commented 1 year ago

OSSelot team would be happy to collaborate on re-using the data.

kraih commented 1 year ago

I'd be interested to hear what collaboration could look like. The review system we use and all 29103 license patterns are already open source (in this repo). Our production database currently contains 266412 reviews for 39418 distinct packages. Some of the data is confidential though.

lkocman commented 1 year ago

https://hackweek.opensuse.org/22/projects/osselot-collaboration-on-legal-reviews-of-community-packages