Contract verification

[kof]

Lets discuss how we can easily verify what kind of support a company provides and make sure the contract is strong and clear.

One suggestion is to specify a standard document ala robots.txt where things company does for open source are listed in a certain format, which could be crowled in the future and also acts as contract to make sure company actually does what it says.

Also things change, we should be able to easily update the list, in an automated way.

[staltz]

I would suggest maintaining this just like awesome-* lists are maintained: manually.

[kof]

I don't know if @ShaneCurcuru ment exactly this or I just realized it. We can verify in an automated way which company supports which project by letting projects maintainers have a text file saying what company does support it and evtl. even name the type of support, so we can actually crowl the projects and get the companies supporting them. This also ensures against fraud because it is unlikely that project maintainers will place companies into the list which haven't supported them yet :) Also it allows maintainers to update the list, so that it stays a living list.

[kof]

supporters.txt could look like this:

{CompanyName}, {URL}, {SupportType}, {Since}, {Until}

Support Types:

• Money
• Developers
• Internal (meaning own in-house OSS, better name?)
• Infrastructure
• Marketing
• Anything else?

If we want to go deeper for better rendering on the website in the future, we could ask to also indicate amounts for each support type.

[kof]

I would suggest maintaining this just like awesome-* lists are maintained: manually.

Is still an option, though I wanted to explore scalable, dynamic alternatives.