Synopsys is the latest OpenChain Partner

By Featured, News

SAN FRANCISCO, September 2, 2020 – The OpenChain Project announces Synopsys as the latest official OpenChain Partner.

“Black Duck, acquired by Synopsys in 2017, has long been recognized as a pioneer in the field of open source compliance tooling and management solutions,” says Matthew Jacobs, Director, Legal Counsel at Synopsys. “Encouraging and enabling organizations of all sizes to use open source in a responsible manner, respectful of the copyright holder’s intentions, requires a commitment to process and we are thrilled to join the OpenChain community in promoting adoption of, and commitment to, that process.”  

“Matt Jacobs and the team at Synopsys have long been involved around the OpenChain Project via webinars and other outreach activity,” says Shane Coughlan, OpenChain General Manager. “It is great to welcome them into the program and provide additional freedom of choice for people seeking assistance from tooling vendors.”

About Synopsys

Synopsys technology is at the heart of innovations that are changing the way people work and play. Self-driving cars. Machines that learn. Lightning-fast communication across billions of devices in the datasphere. These breakthroughs are ushering in the era of Smart Everything―where devices are getting smarter, everything is connected, and everything must be secure.

Powering this new era of digital innovation are high-performance silicon chips and exponentially growing amounts of software content. Synopsys is at the forefront of Smart Everything with the world’s most advanced technologies for chip design, verification, IP integration, and software security and quality testing. We help our customers innovate from silicon to software so they can bring Smart Everything to life.

OpenChain 2.0 Guide for Open Source Governance in the Enterprise (Korean)

By Featured, News

A new guide created by the OpenChain Korea Work Group in collaboration with NIPA, a Korean government agency, explains how local companies can easily and effectively comply with the OpenChain specification. This guide was prepared based on the following documents:

  • The OpenChain Project Website
  • The OpenChain Specification 2.0
  • The OpenChain Open Source Policy Template
  • The book by Ibrahim Haddad entitled ‘Open Source Compliance In The Enterprise’

The guide will be revised after the ISO/IEC JTC1 PAS Transposition Process when the OpenChain specification becomes a formal International Standard.

Read The Guide

Learn More About The OpenChain Korea Work Group

Learn More about NIPA, the Korean Government Agency

Open Source Security is the Latest OpenChain Conformant Company

By Featured, News

Open Source Security, the company behind grsecurity – a security enhancement to the Linux kernel – has announced an OpenChain conformant program.

“While Open Source Security, Inc. has always taken license compliance seriously and involved highly-qualified legal counsel in drafting our company’s policies in compliance with those licenses, we recently became aware of the OpenChain project and its efforts in formalizing compliance practices within organizations using and improving Free and Open Source software,” says Bradley Spengler, President at Open Source Security. “Having verifiable documentation of our operating and review procedures became top of mind for us as we embark on expanding our operations. Formalizing the policies to include licenses and activities we are not yet involved in left us prepared for the future and was well-received by the team, particularly our junior staff.  We thank the OpenChain project for providing a well-thought-out, comprehensive, and accessible standard to help organizations formalize and communicate their compliance practices.”

“The OpenChain industry standard is designed to help companies in all sectors address the issue of process management around the exceptional potential of open source,” says Shane Coughlan, OpenChain General Manager. “It is great to welcome Open Source Security into the fold with the announcement of another OpenChain conformant program. We look forward to future collaboration as our standard is increasingly adopted in their domain.”

Learn More About Open Source Security

[更新予定] Open Source Compliance 関連

By Featured, News

当初 12/24 記事として公開していた記事 「OpenChain Japan WG 第13回会合のご案内」 は、諸事情により「一般公開」ができなくなりました。Japan WG (JWG) の活動に関心のある方は JWGのwiki から “OpenChain Japan WG ML” への参加をご検討ください。第13回会合の案内なども共有予定です。

そのため、Open Source Compliance 関連で別内容の記事を準備中です。

[番外編] Raspberry Pi +Docker で FOSSology を動かせるか… (2019/12/29追加)

手元で気軽に使える OSS監査ツール環境を作りたかったのと、Linux を少しでも触ろうかなと思いやってみた… というか、やっているところ。

元ネタは、SONYの小保田さんが、Japan Technical Jamboree 70 にて 「FOSSology – Install from Sourceのススメ(pdf)」 を発表されたと OpenChain Japan WG の Tooling SWG 第5回(2019-10-17) で伺ったことによる。ただ、まったく同じ事をするのもどうかと思い、docker 上で動かしてみようかなと…

えぇ、そうです、Raspberry Pi 4 (4GB) を買うための理由にしました…

以下は 12/24 公開のもの


[Tool] OSS Review Toolkit

FOSSology + SW360 と同じように、OSS を OSS で管理するためのツールです。
業務ワークフローや、組織間での情報管理などを意識している設計のように思われるため、OpenChain Japan WG の Tooling SWG メンバーでも関心が集まりつつあります。

[Article] Open Source AI – What’s 2020 Looking Like?

Ibrahim Haddad, Published on December 22, 2019

Artificial Intelligence については、Ethics(倫理) に関する話題を目にしますが、利用する Open Source Software や Data といった構成する技術や要素についても議論があります。英文記事ですが、AI と Open Source について話題を振り返りつつ、来年に向けての課題整理のために目を向けて見るのはいかがでしょうか。


明日12月25日は、この Advent Calendar 企画の締めくくりとなります。
トヨタ自動車の遠藤さんが、Promotion SWG を紹介し、そして、この25日間を振り返ります。国内外の産業界が Open Source Compliance に注目する中、どんな話しが出てくるのでしょうか。お楽しみに!


忍頂寺です。所属等は別記事「Open Source Compliance のお役立ち情報まとめ・上 (12/14公開記事)」 を参照ください。「(同)下 (12/15公開記事)」もあります。

OpenChain Webinar #11 – First Monday of September at 9am Pacific – Open Source Issues Remediation + Community Bridge and SPDX Online Tools + CII Best Practices

By Featured, News

Join us on September 7 at 9am Pacific as Jari Koivisto talks about Open Source Issues Remediation, Gary O’Neall and Rohit Lodha talk about Community Bridge and SPDX Online Tools and David Wheeler talks about CII Best Practices (the project equivalent of the OpenChain standard).

This is part of the bi-weekly OpenChain Webinar series. We feature international speakers on a wide range of topics related to open source compliance challenges and solutions. Learn more here:

Join Our Webinar


  • 123456

One Tap Telephone (no screensharing)

* +358 9 4245 1488,,9990120120# Finland
* +33 7 5678 4048,,9990120120# France
* +49 69 7104 9922,,9990120120# Germany
* +852 5808 6088,,9990120120# Hong Kong
* +39 069 480 6488,,9990120120# Italy
* +353 6 163 9031,,9990120120# Ireland
* +81 524 564 439,,9990120120# Japan
* +82 2 6105 4111,,9990120120# Korea
* +34 917 873 431,,9990120120# Spain
* +46 850 539 728,,9990120120# Sweden
* +41 43 210 71 08,,9990120120# Switzerland
* +44 330 088 5830,,9990120120# UK
* +16699006833,,9990120120# US (San Jose)
* +12532158782,,9990120120# US

Find your local number: ( )
Not all countries have available numbers.

After dialing the local number enter 9990120120#

Check Out All Our Other Webinars

OpenChain Merchandise Now Available!

By Featured, News

The OpenChain Project now has official merchandise! You will find everything from t-shirts to tote-bags to phone cases to mugs in our store. Everything is priced at cost with Threadless. Logos, penguins, country teams and a special global team image. It is all there.

Check Out The Zero Profit Store!

Source Code For The Images

One more thing…

We have a marketing budget for our country and international teams. Right there is $25 USD of merchandise per head for 400 people (including shipping). This is a thank you for everyone who helped make OpenChain what it is. Here is the allocation of the award funds based on the subscriber numbers to various country and global lists:

Please contact Rachel ( and let her know what you want. She will assemble a spreadsheet to track everything and we will order as each batch fills up.

OpenChain Webinar #10 – Joint Development Foundation – 2020-08-17 – Full Recording

By Featured, News

Seth Newberry from the Joint Development Foundation joined us to provide an overview of what they do, how it impacts OpenChain, and what it means for other open source and related projects moving forward. As always we had some great comments and questions, and we look forward to getting more over time via our mailing lists and meetings!

Check Out The Slides

Check Out All Our Past Webinars

OpenChain Japan WG全体会合レポート

By News


(Today I report to the OpenChainJapanWG meeting on 19 Dec. in NEC corporation)


(Open discussion is very important, because we heve to avoid antitrust risks)

ご参考までに、Linux Foundationの”Antitrust Policy” はこちら。

自己紹介(Self introduction)


好きなライセンスは、Apache License 2.0です。

会場にやってきた(Arrived conference room)

iOS の画像.jpg




はじまった(The meeting started)

まずは、ホストのNEC OSS推進センター 菅沼さんからNECにおけるOSSのこれまでの取り組みと、OSSを利活用を通じたイノベーションの促進に関してお話を頂きました。
(Mr. Suganuma explain about NEC’s OSS activities)


(Mr. Shane review 2019, and explain goals of 2020)

各サブWG の紹介(Introduction of sub-group)


(Introduction of Sub-Group progress)

OSSライセンスと著作権法(what is OSS licence? Copyright?)


(It was amazing lecture!!)

海外ゲスト講演の様子(Guest Speech)



(Let’s Opensource manage by Opensource)


韓国における、オープンソースコンプライアンスの広がりについて、「share and collaborate」の重要性を中心に講演頂きました。
(「share and collaborate」is worth spreading!!)


(He explain scanning tools)

オープンコンプライアンスサミットの報告(review of open compliance summit)


トヨタ自動車の遠藤さんと富士通の大崎さんより、この会合の前日・前々日に開催されたOpen Compliance Summitについて情報シェアを頂きました。
(They review open compliance summit)


LT大会(Lightning talk)

最後は、パナソニックの加藤さん中心となり、有志の方々が1社 2分30秒で、OSS活用事例共有についてピッチ頂きました(こちらも一部の写真で見ません)。


(short pitch was held)


2020/2/18(火)に開催される、OpenChain Japan WG 第13回会合について、DeNA忍頂寺さんにご案内を頂く予定です。本レポートで次回の会合に参加したいと思う方が一人でも増えると嬉しいです。
(Tomorrow, we explain about next meeting!!)