111–120 of 223 posts
That's just sad. Open Source support really needs to be normalized in corporate environment. Now it's more of an exception than the rule.
It won't. The only real workaround right now is to simultaneously launch SaaS alongside the FOSS project and monetize that heavily.
I want someone to build this: SBOM (Software Bill of Materials) are slowly becoming ubiquitus around the world due to regulation. I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. This data is then submitted to a donation aggregator which analyzes those…
thanks.dev does this. I think I saw GitHub Sponsors also started (or will start?) doing something like this, but I'm not sure on the details off-hand. But yeah, I've argued for this a long time as well: who is going to look up 100 to 2,000 dependencies and see if they accept donations and set that up and cancel when you stop using it, add new ones when you start using them (and many will be transitive deps, so you ha…
Just sending go.mod etc. only looks at the software in the build process which doesn't go far enough.
But I think we're on the same page!
I want someone to build this: SBOM (Software Bill of Materials) are slowly becoming ubiquitus around the world due to regulation. I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. This data is then submitted to a donation aggregator which analyzes those…
> I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. Then your boss will come and ask WTF do you use VLC for when all the videos are on the web, also some default media player comes with your OS and by the way, you are not supposed to watch videos during…
I want someone to build this: SBOM (Software Bill of Materials) are slowly becoming ubiquitus around the world due to regulation. I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. This data is then submitted to a donation aggregator which analyzes those…
I got flashbacks from my tiny startup days when corporate went to procurement companies which wanted specific terms and mode of payment. And after all the infrastructure was in place... they basically spent no money!
The SBOM idea exists in various forms. Few need it and few use it.
If somebody wants to pay money, they will figure out a way. If they want to invent an excuse they will find one.
I want someone to build this: SBOM (Software Bill of Materials) are slowly becoming ubiquitus around the world due to regulation. I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. This data is then submitted to a donation aggregator which analyzes those…
Earlier quoted context omitted.
And PSD is notoriously complicated. I remember reading some rant by an open source developer and there were things along the lines of different endianness in the same file. It’s a 30+ year old format that went to multiple transitions. I don’t envy the poor soul that has to reverse engineer it.
> I remember reading some rant by an open source developer This one? https://github.com/gco/xee/blob/4fa3a6d609dd72b8493e52a68f31...
I want someone to build this: SBOM (Software Bill of Materials) are slowly becoming ubiquitus around the world due to regulation. I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. This data is then submitted to a donation aggregator which analyzes those…
Say more about this SBOM regulation. Do you have an EN standard or something you can point me to?
The US government has added SBOMs to a proposed rule to update the Federal Acquisition Regulation. So if you want to sell to the US Government you'll have to provide SBOMs: https://www.federalregister.gov/documents/2023/10/03/2023-21...
Lots of large companies require SBOMs from their supplier.
In the EU we will get the Cyber Resilience Act which will make them mandatory as well in certain cases: https://data.consilium.europa.eu/doc/document/ST-12536-2023-...
And yes, there's bascially two technical standards to provide them: SPDX and CycloneDX: https://cyclonedx.org/
Earlier quoted context omitted.
is there an interchangeable format for this? .tiff? .ora?
If interchangeable format means non-proprietary then Krita's .kra is one. If it means a format designed to be used as interchangeable format then .ora. If it means one that everyone uses then none.