{"id":78876,"date":"2019-12-12T09:00:18","date_gmt":"2019-12-12T17:00:18","guid":{"rendered":"https:\/\/cloudblogs.microsoft.com\/opensource\/?p=78876"},"modified":"2025-06-27T04:18:25","modified_gmt":"2025-06-27T11:18:25","slug":"announcing-microsoft-openchain-conformance","status":"publish","type":"post","link":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/","title":{"rendered":"Microsoft announces OpenChain 2.0 conformance for open source"},"content":{"rendered":"\n

Trust is key to open source. Developers should be able to trust users to respect their licensing choices. And when you receive software, you should be able to trust that the open source licenses were followed. The OpenChain Project<\/a> plays an important role in building trust by setting standards that define how to operate a high-quality open source compliance program. It means that when you receive open source from a company that follows the OpenChain standard, you can be assured that the code went through a rigorous license compliance process. You can trust it.<\/p>\n\n\n\n

At Microsoft we\u2019re continually working with the community to help build and enhance trust in open source. When we first started working with OpenChain, our goal was to help develop a specification that could meet the compliance needs of the entire open source community \u2013 from the single developer to the largest enterprise. And today we\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.<\/p>\n\n\n\n

So why does this matter? When companies, especially large enterprises, purchase software, they need to know what open source is included in the product so they can be sure to meet their compliance obligations. As supply chains grow, each link in the chain must meet its open source obligations \u2013 a weak link means you can\u2019t trust the code.<\/p>\n\n\n\n

And if you can\u2019t trust that the code in your supply chain meets its open source obligations, you can\u2019t easily use it. You need to verify it yourself. That requires money and time. It imposes friction. Sometimes it means that companies resist accepting open source. Other times it means that open source purveyors need to navigate the difficult and often conflicting open source compliance requirements of various enterprise customers.<\/p>\n\n\n\n

OpenChain aims to remove that friction by establishing a standard for what it takes to create and operate a high-quality open source program.<\/p>\n\n\n\n

Just like an individual car buyer should not have to inspect the factory floor to make sure their car was made to be safe, a user of software should not have to inspect how the software was made to make sure it meets its open source obligations. Working with OpenChain compliant individuals and enterprises, enterprises can now consume open source software solutions knowing that the provider has programs and processes in place to make sure the software is compliant.<\/p>\n\n\n\n

So how has Microsoft implemented OpenChain? A few short years ago we used only a small handful of open source components. Today, it\u2019s not uncommon that Microsoft uses over 150,000 open source components per month. We do this responsibly via a strong partnership between our legal and engineering teams. We\u2019ve developed industry-leading tooling, policies, and automations. We participate in ClearlyDefined<\/a>, an open source project working to help all open source developers clearly define and state their license so that users can comply with them. We have clear roles around our open source programs office, legal open source efforts, open source engineering, and support. We work actively to make sure our engineers are aware of our open source policies and know where to go internally and externally. And we work to make sure that source code is available for open source software that we ship with source-availability requirements.<\/p>\n\n\n\n

All of this and many more activities are part of our OpenChain conformance. We do this because it\u2019s the right thing to do. We do it so our customers trust the software they receive from Microsoft. And we do this with OpenChain to build trust across the larger ecosystem. Together, we hope to drive open source adoption and make using open source easier for everyone.<\/p>\n\n\n\n

Questions or feedback? Please let us know in the comments below.<\/p>\n","protected":false},"excerpt":{"rendered":"

Trust is key to open source. Developers should be able to trust users to respect their licensing choices. And when you receive software, you should be able to trust that the open source licenses were followed.<\/p>\n","protected":false},"author":5562,"featured_media":95466,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"msxcm_post_with_no_image":false,"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"post_tag":[],"content-type":[346],"topic":[2248],"programming-languages":[],"coauthors":[448],"class_list":["post-78876","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-standards","review-flag-2-1593580437-411","review-flag-partn-1593580279-545"],"yoast_head":"\nMicrosoft announces OpenChain 2.0 conformance for open source | Microsoft Open Source Blog<\/title>\n<meta name=\"description\" content=\"We\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft announces OpenChain 2.0 conformance for open source | Microsoft Open Source Blog\" \/>\n<meta property=\"og:description\" content=\"We\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Open Source Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-12-12T17:00:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-27T11:18:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1170\" \/>\n\t<meta property=\"og:image:height\" content=\"640\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Rudin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@OpenAtMicrosoft\" \/>\n<meta name=\"twitter:site\" content=\"@OpenAtMicrosoft\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Rudin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 min read\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\"},\"author\":[{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/author\/david-rudin\/\",\"@type\":\"Person\",\"@name\":\"David Rudin\"}],\"headline\":\"Microsoft announces OpenChain 2.0 conformance for open source\",\"datePublished\":\"2019-12-12T17:00:18+00:00\",\"dateModified\":\"2025-06-27T11:18:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\"},\"wordCount\":624,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\",\"name\":\"Microsoft announces OpenChain 2.0 conformance for open source | Microsoft Open Source Blog\",\"isPartOf\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp\",\"datePublished\":\"2019-12-12T17:00:18+00:00\",\"dateModified\":\"2025-06-27T11:18:25+00:00\",\"description\":\"We\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.\",\"breadcrumb\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp\",\"contentUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp\",\"width\":1170,\"height\":640},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/opensource.microsoft.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft announces OpenChain 2.0 conformance for open source\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#website\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/\",\"name\":\"Microsoft Open Source Blog\",\"description\":\"Open dialogue about openness at Microsoft \u2013 open source, standards, interoperability\",\"publisher\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/opensource.microsoft.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#organization\",\"name\":\"Microsoft Open Source Blog\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png\",\"contentUrl\":\"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png\",\"width\":259,\"height\":194,\"caption\":\"Microsoft Open Source Blog\"},\"image\":{\"@id\":\"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/OpenAtMicrosoft\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft announces OpenChain 2.0 conformance for open source | Microsoft Open Source Blog","description":"We\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft announces OpenChain 2.0 conformance for open source | Microsoft Open Source Blog","og_description":"We\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.","og_url":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/","og_site_name":"Microsoft Open Source Blog","article_published_time":"2019-12-12T17:00:18+00:00","article_modified_time":"2025-06-27T11:18:25+00:00","og_image":[{"width":1170,"height":640,"url":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.png","type":"image\/png"}],"author":"David Rudin","twitter_card":"summary_large_image","twitter_creator":"@OpenAtMicrosoft","twitter_site":"@OpenAtMicrosoft","twitter_misc":{"Written by":"David Rudin","Est. reading time":"2 min read"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#article","isPartOf":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/"},"author":[{"@id":"https:\/\/opensource.microsoft.com\/blog\/author\/david-rudin\/","@type":"Person","@name":"David Rudin"}],"headline":"Microsoft announces OpenChain 2.0 conformance for open source","datePublished":"2019-12-12T17:00:18+00:00","dateModified":"2025-06-27T11:18:25+00:00","mainEntityOfPage":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/"},"wordCount":624,"commentCount":0,"publisher":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#organization"},"image":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage"},"thumbnailUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/","url":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/","name":"Microsoft announces OpenChain 2.0 conformance for open source | Microsoft Open Source Blog","isPartOf":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage"},"image":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage"},"thumbnailUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp","datePublished":"2019-12-12T17:00:18+00:00","dateModified":"2025-06-27T11:18:25+00:00","description":"We\u2019re happy to announce that Microsoft is now OpenChain 2.0 conformant.","breadcrumb":{"@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#primaryimage","url":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp","contentUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2024\/06\/CLO19_Ubisoft_Azure_055.webp","width":1170,"height":640},{"@type":"BreadcrumbList","@id":"https:\/\/opensource.microsoft.com\/blog\/2019\/12\/12\/announcing-microsoft-openchain-conformance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/opensource.microsoft.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft announces OpenChain 2.0 conformance for open source"}]},{"@type":"WebSite","@id":"https:\/\/opensource.microsoft.com\/blog\/#website","url":"https:\/\/opensource.microsoft.com\/blog\/","name":"Microsoft Open Source Blog","description":"Open dialogue about openness at Microsoft \u2013 open source, standards, interoperability","publisher":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/opensource.microsoft.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/opensource.microsoft.com\/blog\/#organization","name":"Microsoft Open Source Blog","url":"https:\/\/opensource.microsoft.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png","contentUrl":"https:\/\/opensource.microsoft.com\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png","width":259,"height":194,"caption":"Microsoft Open Source Blog"},"image":{"@id":"https:\/\/opensource.microsoft.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/OpenAtMicrosoft"]}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Open Source Blog","distributor_original_site_url":"https:\/\/opensource.microsoft.com\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts\/78876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/users\/5562"}],"replies":[{"embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/comments?post=78876"}],"version-history":[{"count":1,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts\/78876\/revisions"}],"predecessor-version":[{"id":97708,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/posts\/78876\/revisions\/97708"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/media\/95466"}],"wp:attachment":[{"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/media?parent=78876"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/post_tag?post=78876"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/content-type?post=78876"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/topic?post=78876"},{"taxonomy":"programming-languages","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/programming-languages?post=78876"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/opensource.microsoft.com\/blog\/wp-json\/wp\/v2\/coauthors?post=78876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}