Vendor definition

[tschmidtb51]

As discussed in today's TC meeting, we should define the vendor. Here is the definition of CSAF as a starting point:

vendor: the community, individual, or organization that created or maintains a product (including open source software and hardware providers)

[tschmidtb51]

We might need to also add something about services:

product: is any deliverable (e.g. software, hardware, specification,...) which can be referred to with a name. This applies regardless of the origin, the license model, or the mode of distribution of the deliverable. Also services fall under that definition.

[p-rog]

The product clarification should be part of the Product Lifecycle definition and also should be included in the product category like we discussed recently. I've adjusted the #35 please take a look and comment there if you like it :)

I will try to propose a comprehensive vendor definition soon (beginning of September).

[thschaffr]

Hello team,

as discussed in the previous meeting, @p-rog and I worked on the following draft proposal for the term vendor.
The definition has been closely aligned with the existing definition from CSAF.

Vendor refers to the community, individual, or organization that created or maintains a product (software, hardware, managed service and other deliverables). This includes, but is not limited to, open-source software and hardware providers.

We are looking forward to the input from the TC.
Thank you.

[thschaffr]

The motion to accept the definition above is available at:
https://groups.oasis-open.org/discussion/motion-to-accept-the-vendor-definition