Open Source Summit North America 2018

Chances are, every component in your application has a license or uses a copyright with implied restrictions. Thus, every component you use imposes a burden on your users. Have you clearly communicated to your users what burden is? What if your project is used as a component in another application? Do your licensing obligations get lost in translation? SPDX is the language enabling all producers and consumers of open source to communicate and to know their components and obligations. In this talk, we’ll look at real-life cases of license (mis-)management. We’ll discuss how, with a few simple steps, developers can clearly communicate license information and reduce license risk for their users and how, with some open-source tools, SPDX can empower you to be in control of your licensing risks.