FOSS Contribution Lexicon
Shared vocabulary used across the FOSS contribution Gemara artifacts (source).
Terms
claContributor License Agreement
A contract between the FOSS project and either an individual developer or the company contributing code. CLAs may be categorized as Individual CLAs or Corporate CLAs (CCLA).
individual-claIndividual CLA
An individual developer agrees they have the right to contribute code and binds their contributions to the FOSS project under the terms of the CLA.
corporate-claCorporate CLA
Provides direct corporate authority for employees of a company to make contributions with explicit authority for a patent grant in an open source license. Corporate CLAs must be signed by an authorized signatory to be valid.
dcoDeveloper Certificate of Origin
A per-commit sign-off made by a contributor indicating they agree to the terms published at https://developercertificate.org for that particular contribution.
foss-communityFOSS Community
A group of authorized individuals with contribution or review entitlement to a FOSS project. The FOSS project can be organized as part of a foundation or for-profit entity.
fossFree and Open Source Software
Software made available under an Open Source Definition compliant license in source code form to facilitate modification. FOSS and Open Source are interchangeable in these guidelines.
osdOpen Source Definition
A document published by the Open Source Initiative used to determine if a license can be labeled with the Open Source Certification mark.
open-source-foundationOpen Source Foundation
Not-for-profit and charitable organizations providing a neutral playing field for developers, technologists, and companies to collectively contribute to common solutions and growth.
company-moderated-projectCompany Moderated Project
An open-source project initiated by the company where the company acts as the primary project moderator or maintainer.
company-interest-major-projectCompany Interest (Major) Project
An open-source project consumed in company applications, moderated by a non-company entity, where the company wishes to influence project direction or contribute significant functionality.
company-interest-minor-projectCompany Interest (Minor) Project
An open-source project consumed in company applications where the company does not wish to influence direction but benefits from allowing employee contributions such as small enhancements and bug fixes.
personal-contribution-projectPersonal Contribution Project
An open-source contribution effort conducted by employees outside regular company-contracted activities for projects that are not company moderated or company interest and provide no benefit to the company.
non-standard-cryptographyNon-Standard Cryptography
Any implementation of cryptography involving proprietary or unpublished cryptographic functionality, including encryption algorithms or protocols that have not been adopted or approved by a duly recognized international standards body and have not otherwise been published.
security-policySecurity Policy
Project-published instructions describing how to report security vulnerabilities in the project, commonly provided as SECURITY.md.