===== Google Summer of Code 2018 =====

We have applied for the Google Summer of Code 2018 as organization. This lists the topics so far we heve collected for this application.

==== Mentors ====

  * Maximilian: Maximilian Huber, mail@maximilian-huber.de 
  * Kate: Kate Stewart, kstewart@linuxofundation.org
  * Michael: Michael C. Jaeger, mcj@mcj.de
  * Gaurav: Gaurav Mishra, mishra.gaurav@siemens.com

==== Project #1: Artifacts Scanner ====

== Skills Needed ==

  * PHP and / or C/C++ programming
  * Database programming
  * Software development on Linux

== Description ==

Current scanners search for regular expressions or text similarity of license texts. However, this can lead to interpretations issues when it comes to conclude the actual condition of licensing of files. Opposed to genuine license texts, open source software authors use prosaic descriptions referring to licensing. If scanning understands different licensing artifacts, conclusions can be automated at higher precision.

== Tasks ==

From an existing database of licensing texts and descriptions a model needs to created. Based on that model a the existing scanner is extended. With distinguishing recognition by types of licensing artifacts, conclusions can be automated more efficiently.

== Possible Mentor(s) ==

Maximilian, Michael

==== Project #2: Get SPDX file by command line and REST API ====

== Skills Needed ==

  * PHP and / or C/C++ programming
  * Database programming
  * Software development on Linux

== Description ==

A REST API in the straight forward sense of FOSSology would be about handling uploads or triggering scanners. However, a REST API in the sense of the SPDX standard, an XML format for expressing license compliance would be different than the traditional endpoints of the FOSSology application. For working in the sense of the SPDX standard it would be about file or source package centric endpoints for exchanging license and copyright, making hash sums of files or packages queryable as resource. A similar interface could be implemented as command line tool.

  * SPDX license information standard https://spdx.org

== Tasks ==

Create a REST endpoint when FOSSology is deploying, allowing for exchanging license information for file hashes.

https://github.com/fossology/fossology/issues/592

== Possible Mentor(s) ==

Kate, Michael

==== Project #3: Graphical representation of license contents / graphical statistics ====

Description: It would be nice to see the the overall contents of a project at one glance.
Possible Mentor(s): Maximilian, Michael

==== Project #4: Fields for SPDX metadata, update to latest SPDX 2.1 and license list 3.0 ====

Description:
Possible Mentor(s): Maximilian, Kate, Michael



More project Ideas:

  * A new REST API, throwing a SHA for upload there and get SPDX back (in case it is there already)
  * A Programming Language Analysis plugin)
  * Cool search of files, currently the search is like 80ies style Web page
  * More intelligent / configurable decider