Open Compliance Summit

Hitachi develops and provides enterprise systems with a large amount of Open Source Software, and the number of OSS used at Hitachi is increasing year by year. It is getting hard that developers recognize the whole stacks of OSS they use, because today’s OSS requires numerous other OSS under the hood and those dependencies are downloaded automatically on demand by tools like package managers. That makes it difficult to perform comprehensive license clearance promptly.
Daisuke established a system to solve this problem. The system is a kind of proxy server, which saves all files flowing through this proxy and detect what OSS and licenses each file includes. It enables developers to know what OSS they actually obtain and what licenses are included as they download. In this talk, Daisuke will present how the system works, how its improvement is, and future work.