SPDX 2.0 COMPATIBILITY HAS BEEN ADDED, ACCORDING TO PROTECODE

Protecode has announced its support for the spdx 2.0 standard. Protecode solutions make it easier for software supply chains to communicate licensing information. ottawa, canada, the 12th of may, 2015: Today, protecode, an industry leader in the provision of open source license management systems and an active participant in the Linux Foundation’s software package data exchange (spdx) group, made the announcement that its products will support the software package data exchange (spdx) 2.0 standard. spdx is the outcome of a collaborative effort to produce a standard format for transmitting the components, licenses, and copyrights associated with a software package. This project is funded by the Linux Foundation. Protecode provided code that implements functionality that is used for reading, writing, and validating spdx files when it was an early member of the spdx standards committee and when it continued to participate in the committee after that. In 2011, the year the initial version of the standard was certified, protecode began incorporating support for spdx into its software solutions. The capacity of Protecode systems to read and create spdx information facilitates the transmission of information about software components all throughout the software supply chain, which in turn makes the process of licensing compliance much more straightforward. With today’s publication of the newest version of the standard, protecode is continuing its support of open source scanning and management tools by adopting spdx 2.0 in its products. This announcement was made in conjunction with today’s launch of the latest version of the standard. “emergence of standardized methods that communicate a software product structure and its bill of materials highlight the natural evolution of software as a commodity component that is created and consumed by software factories,” said mahshad koohgoli, CEO of protecode. “This highlights the natural evolution of software as a commodity component that is created and consumed by software factories.” “protecode’s participation in the linux foundation’s spdx initiative, as well as its membership in the linux foundation’s open compliance program, demonstrates our ongoing commitment to the software and open source communities by assisting and contributing to improving quality in reusable software, as well as encouraging adoption of open source in public and commercial projects.” The protecode enterprise system and the protecode compact products both have the capability to produce several spdx file formats for software components that are used in a project. These solutions are able to recognize the existence of spdx files inside software packages, read and interpret those data, and highlight the license and copyright information that has been retrieved from the spdx files. Please go to www.protecode.com for any further information. about the protecode protecode offers a variety of goods and services, including open source software licensing and security vulnerability management, with the purpose of controlling open source software characteristics. The solutions provided by protecode make it possible to do accurate and rapid code scanning in both real time and on demand. These scans give policy-based assessments on the obligations and security vulnerabilities present in code portfolios. Built for ease-of-use, integration, and minimal intrusion into already established development processes, protecode products have been implemented in hundreds of organizations around the world. These organizations range in size from just a few developers to multinational corporations with more than 100,000 staff members. The headquarters of protecode are located in Ottawa, Canada, and the company has reseller partners all around the globe. Angela Tuzzo may be reached at 732-758-1100 extension 108 or atuzzo@mrb-pr.com if you have any questions about public relations.