SPDX Generation via Yocto and the New LID Code License Scanner

Explore SPDX generation using Yocto and the new LID code license scanner in this informative conference talk. Gain insights into the advantages of LID and its integration with Yocto, as well as best practices for writing bitbake recipes to optimize license compliance scanning. Learn about the tool's minimal dependencies and its application in producing SPDX files for Dronecode's Snapdragon Flight-based releases. Discover the comparative analysis of LID with existing tools, covering aspects such as coverage, accuracy, and flexibility. Presented by Mark Charlebois, Director Engineering at Qualcomm Technologies Inc. and Dronecode TSC Chair, and Rashmi Chitrakar, Engineering Lead for Qualcomm's Open Source Technology Group, this talk offers valuable knowledge for developers working with open source software and license compliance.

Intro
Agenda
What is SPDX
Existing SPDX class
SPDX Archiver BV class
Limitations
Source Map
Initial Approach
Sourcemap
Nomos
Monk
Goals
Example Output
Comparative Analysis
Coverage
Accuracy
Flexibility
Example Package
Status
LiveMagic