Table of Contents
Google Summer of Code 2018
We have applied for the Google Summer of Code 2018 as organization. This lists the topics so far we heve collected for this application.
Mentors
- Maximilian: Maximilian Huber, mail@maximilian-huber.de
- Kate: Kate Stewart, kstewart@linuxofundation.org
- Michael: Michael C. Jaeger, mcj@mcj.de
- Gaurav: Gaurav Mishra, mishra.gaurav@siemens.com
Project #1: Artifacts Scanner
Skills Needed
- PHP and / or C/C++ programming
- Database programming
- Software development on Linux
Description
Current scanners search for regular expressions or text similarity of license texts. However, this can lead to interpretations issues when it comes to conclude the actual condition of licensing of files. Opposed to genuine license texts, open source software authors use prosaic descriptions referring to licensing. If scanning understands different licensing artifacts, conclusions can be automated at higher precision.
Tasks
From an existing database of licensing texts and descriptions a model needs to created. Based on that model a the existing scanner is extended. With distinguishing recognition by types of licensing artifacts, conclusions can be automated more efficiently.
Possible Mentor(s)
Maximilian, Michael
Project #2: Get SPDX file by command line and REST API
Skills Needed
- PHP and / or C/C++ programming
- Database programming
- Software development on Linux
Description
A REST API in the straight forward sense of FOSSology would be about handling uploads or triggering scanners. However, a REST API in the sense of the SPDX standard, an XML format for expressing license compliance would be different than the traditional endpoints of the FOSSology application. For working in the sense of the SPDX standard it would be about file or source package centric endpoints for exchanging license and copyright, making hash sums of files or packages queryable as resource. A similar interface could be implemented as command line tool.
- SPDX license information standard https://spdx.org
Tasks
Create a REST endpoint when FOSSology is deploying, allowing for exchanging license information for file hashes.
Possible Mentor(s)
Kate, Michael
Project #3: Graphical representation of license contents / graphical statistics
Description: It would be nice to see the the overall contents of a project at one glance. Possible Mentor(s): Maximilian, Michael
Project #4: Fields for SPDX metadata, update to latest SPDX 2.1 and license list 3.0
Description: Possible Mentor(s): Maximilian, Kate, Michael
More project Ideas:
- A new REST API, throwing a SHA for upload there and get SPDX back (in case it is there already)
- A Programming Language Analysis plugin)
- Cool search of files, currently the search is like 80ies style Web page
- More intelligent / configurable decider
