METHODS AND SYSTEMS FOR MANAGING SOFTWARE DEVELOPMENT

• US 20080154965A1
• Filed: 12/20/2007
• Published: 06/26/2008
• Est. Priority Date: 12/04/2003
• Status: Active Grant

• Current Assignee: Software Integrity Group Incorporated
• Original Assignee: Black Duck Software, Inc. (Synopsys Incorporated)
• Inventors: Pedersen, Palle M.
• Granted Patent: US 9,489,687 B2
• Time in Patent Office: Days
• US Class Current: 707/104.1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 8/36 Software reuse
• CPC Class Codes: G06Q 2220/18 Licensing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Methods and systems to manage software development. Embodiments of the present invention allow a programmer to specify the software packages, services, and other materials used in a particular software project. As development of the software project proceeds, the materials associated with the project are reviewed to identify the materials actually used in the project and to identify any discrepancies between what has been specified and what materials are actually used. Metadata, for example license and contractual terms and other policies relating to the specified materials and the materials actually used in the project may optionally be retrieved and analyzed to identify conflicting metadata.

Claims

1. A method for managing software development, the method comprising:

receiving a specification of materials to be included in a software product thereby generating an inventory of materials included in the software product;

receiving a specification of metadata for at least one of the materials in the inventory;

verifying that the materials used in the software product match the specified materials in the inventory; and

intermittently receiving additional metadata governing at least some of the specified materials in the inventory.

2. The method of claim 1 wherein the materials are one or more of software code and services.

3. The method of claim 1 wherein the metadata are one or more of licensing terms, contractual terms, and specified policies.

4. The method of claim 1 further comprising verifying compatibility of the metadata for each of the materials.

5. The method of claim 1 further comprising receiving approval of the materials in the inventory.

6. The method of claim 5 further comprising storing information regarding the approval of the materials in the inventory.

7. The method of claim 1 further comprising receiving a restriction on the use of materials in the inventory.

8. The method of claim 7 further comprising verifying that the restriction has not been violated.

9. The method of claim 1 further comprising storing metadata about at least one of the materials, the metadata comprising at least one of a web site for such materials;

a version of such materials, information regarding the use of such materials, security vulnerability information, patch availability, patent information, support information, or coding standards.

10. The method of claim 1 wherein verifying the materials used in the product comprises examining the source code of the software product.

11. The method of claim 10 wherein verifying the materials used in the product further comprises comparing the source code for the software product to a library of software components.

12. The method of claim 11 wherein comparing the source code to a library comprises comparing data derived from the source code of the software product to a library of data derived from the source code of a plurality of software components.

13. The method of claim 1 further comprising providing an indication that at least one of the materials specified in the inventory is missing from the software product.

14. The method of claim 1 further comprising providing an indication that at least one of the materials specified in the inventory has been modified.

15. The method of claim 1 further comprising verifying the version of each of the materials in the inventory.

16. The method of claim 1 further comprising identifying materials in the software product that have not been specified in the inventory.

17. The method of claim 1 further comprising:

receiving a notification concerning at least one of the materials specified in the inventory;

providing an indication concerning the received notification.

18. The method of claim 17 wherein the notification comprises at least one of the availability of a newer version of at least one of the materials specified in the inventory, a security vulnerability in at least one of the materials specified in the inventory, or pending litigation affecting at least one of the materials specified in the inventory.

19. A system for managing software development, the system comprising:

a specification module for specifying materials to be included in a software product and generating an inventory of materials included in the software product;

a licensing module for specifying metadata for at least one of the materials in the inventory;

a verification module for verifying that the materials used in the software product match the specified materials in the inventory; and

a receiver for intermittently receiving additional metadata governing at least some of the specified materials in the inventory.

20. The system of claim 19 wherein the materials are one or more of software code and services.

21. The system of claim 19 wherein the metadata are one or more of licensing terms, contractual terms, and specified policies.

22. The system of claim 19 wherein the verification module verifies the compatibility of the metadata for each of the materials.

23. The system of claim 19 further comprising an interface for receiving approval of the materials in the inventory.

24. The system of claim 23 further comprising a memory for storing information regarding the approval of the materials in the inventory.

25. The system of claim 19 further comprising an interface for receiving a restriction on the use of materials in the inventory.

26. The system of claim 25 wherein the verification module verifies that the restriction has not been violated.

27. The system of claim 19 further comprising a memory for storing metadata about at least one of the materials, the metadata comprising at least one of a web site for such materials;

a version of such materials, information regarding the use of such materials, security vulnerability information, patch availability, patent information, support information, or coding standards.

28. The system of claim 19 wherein the verification module verifies the materials used in the product by examining the source code of the software product.

29. The system of claim 28 wherein the verification module verifies the materials used in the product by comparing the source code for the software product to a library of software components.

30. The system of claim 29 wherein the verification module compares the source code to a library by comparing data derived from the source code of the software product to a library of data derived from the source code of a plurality of software components.

31. The system of claim 19 further comprising an interface for providing an indication that at least one of the materials specified in the inventory is missing from the software product.

32. The system of claim 19 further comprising an interface for providing an indication that at least one of the materials specified in the inventory has been modified.

33. The system of claim 19 wherein the verification module verifies the version of each of the materials in the inventory.

34. The system of claim 19 wherein the verification module identifies materials in the software product that have not been specified in the inventory.

35. The system of claim 19 further comprising:

a receiver for receiving a notification concerning at least one of the materials specified in the inventory;

an interface providing an indication concerning the received notification.

36. The system of claim 35 wherein the notification comprises at least one of the availability of a newer version of at least one of the materials specified in the inventory, a security vulnerability in at least one of the materials specified in the inventory, or pending litigation affecting at least one of the materials specified in the inventory.