Open Compliance Summit 2013

The Software Package Data eXchange(SPDX) specification is a standard format for communicating the software components, licenses and copyrights. It is hosted at the Linux Foundation whose goal is to facilitate compliance with free/open source software licenses and the exchange of such information between companies. As a company that uses free/open source software in various products, we has tried to adopt SPDX in our open source governance system. In this talk, we will discuss benefits of the using SPDX in embedded system based on our experience. The first is focused on reducing the cost of verifying open source licenses(auto-identify component), and the second is focused on the implementation of the license note web system.