[LTP] [EXTERNAL] Re: Inquiry: Country of Origin for LCOV Version 1.x

[Zhang, Cynthia X. (GSFC-710.0)[TELOPHASE CORP]]

Thank you for your help!

-----Original Message-----
From: Cyril Hrubis <chrubis@suse.cz> 
Sent: Monday, July 4, 2022 1:56 PM
To: Zhang, Cynthia X. (GSFC-710.0)[TELOPHASE CORP] <cynthia.x.zhang@nasa.gov>
Cc: ltp@lists.linux.it; oberpar@linux.ibm.com
Subject: [EXTERNAL] Re: [LTP] Inquiry: Country of Origin for LCOV Version 1.x

Hi!
> Hello, my name is Cynthia and I am a Supply Chain Risk Management 
> Analyst at NASA. NASA is currently conducting a supply chain 
> assessment of LCOV Version 1.x.  As stated in Sections 208 and 514 of 
> the Consolidated Appropriations Act, 2022, Public Law 117-103, enacted 
> March 15, 2022, a required step of our process is to verify the 
> Country of Origin (CoO) information for the product (i.e., the country 
> where the products were developed, manufactured, and assembled.) As 
> LCOV Version 1.x is open source, we understand that this inquiry is 
> not directly applicable, as contributions may be made from individuals 
> from around the world. In this case, NASA is interested in confirming 
> the following information:
>
>   1.  Is there an organization which sponsors/publishes the project,
>       or a primary developer who audits the code for potential
>       vulnerabilities, errors, or malicious code? Y/N
>
>   2.  Does LCOV Version 1.x have an overseeing organization or
>       individual along these lines? Y/N
>
>   1.  If so, please provide the name of the organization and country
>   they are established in.  If the information above is unknown or
>   cannot be provided, we request that you provide the country or list
>   of countries where the majority of contributions originate from to
>   satisfy Sections 208 and 514 of the Consolidated Appropriations Act,
>   2022, Public Law 117-103, enacted March 15, 2022.

As far as I can tell LCOV is maintained by Peter Oberparleiter from IBM (now in CC).

--
Cyril Hrubis
chrubis@suse.cz