Re: [LTP] Inquiry: Country of Origin for LCOV Version 1.x

[Cyril Hrubis <chrubis@suse.cz>]

Hi!
> Hello, my name is Cynthia and I am a Supply Chain Risk Management
> Analyst at NASA. NASA is currently conducting a supply chain
> assessment of LCOV Version 1.x.  As stated in Sections 208 and 514 of
> the Consolidated Appropriations Act, 2022, Public Law 117-103, enacted
> March 15, 2022, a required step of our process is to verify the
> Country of Origin (CoO) information for the product (i.e., the country
> where the products were developed, manufactured, and assembled.) As
> LCOV Version 1.x is open source, we understand that this inquiry is
> not directly applicable, as contributions may be made from individuals
> from around the world. In this case, NASA is interested in confirming
> the following information:
>
>   1.  Is there an organization which sponsors/publishes the project,
>       or a primary developer who audits the code for potential
>       vulnerabilities, errors, or malicious code? Y/N
>
>   2.  Does LCOV Version 1.x have an overseeing organization or
>       individual along these lines? Y/N
>
>   1.  If so, please provide the name of the organization and country
>   they are established in.  If the information above is unknown or
>   cannot be provided, we request that you provide the country or list
>   of countries where the majority of contributions originate from to
>   satisfy Sections 208 and 514 of the Consolidated Appropriations Act,
>   2022, Public Law 117-103, enacted March 15, 2022.

As far as I can tell LCOV is maintained by Peter Oberparleiter from IBM
(now in CC).

-- 
Cyril Hrubis
chrubis@suse.cz

-- 
Mailing list info: https://lists.linux.it/listinfo/ltp