Ç¥ÁØÈ­ Âü¿©¾È³»

TTAÀÇ Ç¥ÁØÇöȲ

Ȩ > Ç¥ÁØÈ­ °³¿ä > TTAÀÇ Ç¥ÁØÇöȲ

Ç¥ÁعøÈ£ TTAK.KO-11.0182 ±¸Ç¥ÁعøÈ£
Á¦°³Á¤ÀÏ 2014-12-17 ÃÑÆäÀÌÁö 14
ÇѱÛÇ¥ÁØ¸í °ø°³¼ÒÇÁÆ®¿þ¾î Á¤º¸±³È¯¸í¼¼
¿µ¹®Ç¥Áظí Open source software package data exchange specification
Çѱ۳»¿ë¿ä¾à ±â¾÷°ú Á¶Á÷µéÀº °ø°³ ¼ÒÇÁÆ®¿þ¾î¿Í ±âŸ ¼ÒÇÁÆ®¿þ¾î ÆÐÅ°ÁöµéÀ» ±¤¹üÀ§ÇÏ°Ô »ç¿ëÇÏ°í ÀÖ°í Àç»ç¿ëÇÏ°í ÀÖ´Ù. ¶óÀ̼±½º¿Í °ü·ÃµÈ Áعý¼ºÀº °¢°¢ÀÇ Á¶Á÷µéÀÌ µ¶ÀÚÀûÀ¸·Î ¼öµ¿ ȤÀº ÀÚµ¿ °ËÁõ¿¡ ÀÇÇØ °ü·ÃµÈ ¶óÀ̼±½º È®ÀÎÀ» Æ÷ÇÔÇÏ¿© ¼öÇàÇÏ´Â ½Ç»ç¿Í ÀÏ·ÃÀÇ ºÐ¼®È°µ¿À» ÇÊ¿ä·Î ÇÑ´Ù. ¼ÒÇÁÆ®¿þ¾î °³¹ßÆÀµéÀº Àü ¼¼°è¿¡ °ÉÃÄ µ¿ÀÏÇÑ °ø°³ ¼ÒÇÁÆ®¿þ¾î ÆÐÅ°Áö¸¦ »ç¿ëÇÏÁö¸¸ ºÐ¼® È°µ¿ÀÇ °á°ú¸¦ °øÀ¯Çϰųª ºÐ¼®¿¡ À־ Çù¾÷Çϱâ À§ÇÑ ÀÎÇÁ¶ó°¡ ºÎÁ·ÇÏ´Ù. ±× °á°ú ¸¹Àº ±×·ìµéÀÌ Áߺ¹ Á¤º¸¿Í ÀÌÁß ³ë·ÂÀ» ÃÊ·¡ÇÏ´Â µ¿ÀÏ ÀÛ¾÷À» ¼öÇàÇÏ°í ÀÖ´Ù. SPDX ¿öÅ·±×·ìÀº ¼ÒÇÁÆ®¿þ¾î ÆÐÅ°ÁöÀÇ Á¤º¸ Á¤È®¼ºÀ» °³¼±ÇÏ°í ½Ã°£Àý¾àÀ» ¸ñÀûÀ¸·Î ¼ÒÇÁÆ®¿þ¾î ÆÐÅ°Áö¿¡ ´ëÇÑ Á¤º¸¿Í °ü·Ã ³»¿ëµéÀÌ ¼öÁýµÇ°í °øÅëÀÇ ¼­½ÄÀ¸·Î °øÀ¯µÇ±â À§ÇØ Á¤º¸±³È¯ ¼­½ÄÀ» ¸¸µé°Ô µÇ¾ú´Ù. SPDX ¹®¼­´Â »ç¿ëÀ» À§ÇÑ ¶óÀ̼±½º¿Í SPDX ÆÄÀÏÀÇ Æ¯Á¤ ¹öÀüÀ» °¡Áø ºÐ¼®°á°ú¿¡ °ü·ÃµÈ »ý¼ºÁ¤º¸, ÆÐÅ°ÁöÁ¤º¸, ¶óÀ̼±½ºÁ¤º¸, ÆÄÀÏÁ¤º¸¿Í °ËÅäÀÚ Á¤º¸·Î ±¸¼ºµÈ ¸ÞŸ µ¥ÀÌÅÍÀÌ´Ù.
¿µ¹®³»¿ë¿ä¾à Companies and organizations are widely using and reusing OSS and other software packages. Compliance with the associated licenses requires due diligence and careful analysis of performed activities on the part of each independent organization using the packages. While software development teams across the globe use the same open source packages, little infrastructure exists to facilitate collaboration and/or sharing of the analysis results. As a result, many groups are duplicating efforts and performing redundant work. The SPDX working group seeks to create a data exchange format so that information about software packages and related content may be collected and shared in a common format with the goal of saving time and improving data accuracy of software packages.

SPDX Document Information is meta data that consists of creation, package, license, file and reviewer information which is used to compare analysis results with a specific version of the SPDX file and license for use.
±¹Á¦Ç¥ÁØ
°ü·ÃÆÄÀÏ TTAK.KO-11.0182.pdf TTAK.KO-11.0182.pdf            

ÀÌÀü
¾çÀÚ Å° ºÐ¹è - Á¦1ºÎ: ÀϹÝ
´ÙÀ½
Çؽà ÇÔ¼ö ±â¹Ý ¸Þ½ÃÁö ÀÎÁõ ÄÚµå (HMAC) - Á¦1ºÎ: ÀϹÝ