Open Source Summit North America 2018

The FOSS licensing and security information landscape is vast and varied. Projects with fuzzy licensing or unclear security are harder to adopt and so attract fewer contributions and lower engagement. On the consumer side, enormous effort is required to discover and comply with licensing obligations, and track security issues. Even simple things like the location of the source for a component can be painful to find.

This talk surveys this landscape and dives into ClearlyDefined, a recently announced OSI effort to crowdsource the discovery, curation and upstreaming of key information about FOSS components -- source location, licenses, attribution information, security vulnerabilities and more.

Whether this is the first time you are hearing about ClearlyDefined or are curious to see the strides being made, there’s something for everyone! Come see how it works and how you can participate.