Table of Contents

Google Summer of Code 2018

We have applied for the Google Summer of Code 2018 as organization. This lists the topics so far we heve collected for this application.

Mentors

Project #1: Artifacts Scanner

Skills Needed
Description

Current scanners search for regular expressions or text similarity of license texts. However, this can lead to interpretations issues when it comes to conclude the actual condition of licensing of files. Opposed to genuine license texts, open source software authors use prosaic descriptions referring to licensing. If scanning understands different licensing artifacts, conclusions can be automated at higher precision.

Tasks

From an existing database of licensing texts and descriptions a model needs to created. Based on that model a the existing scanner is extended. With distinguishing recognition by types of licensing artifacts, conclusions can be automated more efficiently.

Possible Mentor(s)

Maximilian, Michael

Project #2: Get SPDX file by command line and REST API

Skills Needed
Description

A REST API in the straight forward sense of FOSSology would be about handling uploads or triggering scanners. However, a REST API in the sense of the SPDX standard, an XML format for expressing license compliance would be different than the traditional endpoints of the FOSSology application. For working in the sense of the SPDX standard it would be about file or source package centric endpoints for exchanging license and copyright, making hash sums of files or packages queryable as resource. A similar interface could be implemented as command line tool.

Tasks

Create a REST endpoint when FOSSology is deploying, allowing for exchanging license information for file hashes.

https://github.com/fossology/fossology/issues/592

Possible Mentor(s)

Kate, Michael

Project #3: Graphical representation of license contents / graphical statistics

Description: It would be nice to see the the overall contents of a project at one glance. Possible Mentor(s): Maximilian, Michael

Project #4: Fields for SPDX metadata, update to latest SPDX 2.1 and license list 3.0

Description: Possible Mentor(s): Maximilian, Kate, Michael

More project Ideas: