OpenRoots

ORL-2.2

A side business producing an sbom, under ORL 2.2

A sole trader or small partnership earning under six figures from the work. Generating a software bill of materials for a customer or regulator. This resolves to the Root tier.

Tier

Root

Owed

Nothing. No fee, no report, no filing.

Sections in play

1.7, 16.1, 2.1, 2.2, 8.1

Who and what

The situation being resolved.

Actor

A side business

A sole trader or small partnership earning under six figures from the work.

under 100k USD

Situation

Producing an SBOM

Generating a software bill of materials for a customer or regulator.

Rulings

3 questions resolved against the text.

clear

Which tier applies?

Root. A sole trader or small partnership earning under six figures from the work. Below $20,000,000 in trailing revenue, or within an exempt category, no Canopy royalty applies. Sections 4, 6, 8, and 10 still bind every Licensee.

Sections 1.7, 2.1, 2.2

clear

Is anything owed?

Nothing. No fee, no report, no filing.

Sections 2.1

open

What goes in the SBOM?

Use the SPDX-valid LicenseRef form, the version, the canonical URL, and the attribution records Section 8.1 requires. Until a listed SPDX identifier is issued, do not use an unqualified ORL short form as though it were already on the SPDX License List.

Sections 8.1, 16.1

Cautions

What this situation gets wrong most often.

  • Revenue is measured across entities under common control, per Section 1.4. A parent company above the threshold makes its subsidiary a Canopy Licensee regardless of that subsidiary's own turnover.

Same actor

Other situations for this party.