Google Summer of Code 2025 application

[GMishx]

Hello all!

SW360 as an org is planning to apply for Google Summer of Code this year. In preparation to do so, we are creating this discussion to gather ideas for the GSoC-2025 projects.

Since 2022, there are some changes made by Google in the program. You can read more about it on their website. But as a summary,

• Three sized projects are acceptable by program:
  • Small sized projects (~90 hour)
  • Medium sized projects (~175 hours)
  • Large projects (~350 hours)
• The program is open to 18 years and older people.
  • No longer limited to college students only.
• Flexible time lines between 12 and 22 weeks.

Please feel free to drop any questions here (or start a new discussion) you have regarding the program, you want to submit a proposal idea, you want to be mentor in the program, etc.

While submitting a project idea, please tag it to be "Medium" or "Large" sized and who you'll prefer working on it "student" or "professional".
Some resources from Google:

• https://google.github.io/gsocguides/mentor/defining-a-project-ideas-list
• https://google.github.io/gsocguides/mentor/making-your-ideas-page
• https://google.github.io/gsocguides/student/
• https://opensource.googleblog.com/2024/10/celebrating-20-years-google-summer-of-code-nurturing-next-generation-contributors.html

You can also check the detailed documentation of previous students from FOSSology GSoC-2024.

Here is the list of the people who would be volunteering as mentors & org-admins for GSoC-2025.

• @EttingerK (OrgAdmin)
• @GMishx (OrgAdmin)

Want to mentor this GSoC-2025 ? Please contact OrgAdmins.

[GMishx]

Idea!

Title: Sample project idea 1

Goal: Example Automate the process of model training using pipelining.

Detailed explanation about the project idea. What is expected, if there is already any workflow, etc to be added here.

Bellow are rating out of 3.

Category	Rating
Low Hanging Fruit	**
Risk/Exploratory	*
Fun/Peripheral	**
Core Development	*
Project Infrastructure	**
Project size	Large
Preferred contributor	Student/professional
Skills needed	Python, ML And Data

Contact : @GMishx

[EttingerK]

Idea

License Change Detection

This would be combined effort between SW360 and FOSSology

As the software evolves in time, so does their licensing. A scenario where a package (say "mylib-v1.2") was scanned by FOSSology and cleaned by a clearing team. The new version of the package (say "mylib-v1.5") was released and uploaded again to FOSSology for clearing. Now, another metric can be generated showing the files from both packages against the change in licensing per file (addition, removal, change of license or new file).

This either can be shown in FOSSology itself, but also when doing an initial scan report (ISR), triggered from SW360. Then it would be very visible for the requester if there are changes in the new version of the release or not.

Also the diff could be shown in the CLI files.

It can generated a table like:

File path	mylib-v1.2	mylib-v1.5
path/to/file	MIT	MIT
path/to/file2	MIT,BSD	MIT
path/to/file3	GPL-2.0	GPL-3.0
path/to/new-file		BSD

[Mohamed-hanfy]

Hello sir,
I'm interested in contributing to the License Change Detection project integrating SW360 and FOSSology.

One architectural question I'd like to discuss is about the change tracking approach:

When implementing license change detection across multiple consecutive releases (e.g., releases 1, 2, 3, and now 4), what would be the optimal approach for generating reports? Should we:

• Generate cumulative change history from the initial release whenever a new report is needed (tracking the entire evolution).

• Only track incremental changes between adjacent releases (last release to current).

• Perhaps a hybrid approach storing incremental data but capable of reconstructing the full history when requested

What are the tradeoffs in terms of performance, storage requirements, and usability for compliance teams that would inform this design decision?

[Adarshgupta1127]

Dear @tngraf and @Mohamed-hanfy,

Thank you for the insightful discussion. I’d like to propose a solution for the License Change Detection project that addresses both the traceability challenges raised by @tngraf and the architectural considerations highlighted by @Mohamed-hanfy.

Key Proposal
FOSSology Instance Tracking
Implement a metadata registry in SW360 to track which FOSSology instance/scans correspond to each release.
Use checksum-based matching (already supported by FOSSology’s API) to link files across versions, reducing manual lookup overhead.

Change Detection Logic

Hybrid Reporting Approach:
Incremental diffs (adjacent releases) for daily use (lightweight).
Full historical reconstruction (via stored incremental data) for compliance audits (comprehensive).

Relevance Filtering:
Allow experts to tag files as "relevant/irrelevant" during clearing, with these annotations carried forward in comparisons.

Integration Points
Enhance the ISR (Initial Scan Report) in SW360 to:
Visualize license changes (tabular/CLI output).
Highlight files with conflicting relevance tags across versions for expert review.

[SUMITKC1]

Hi @tngraf, @Mohamed-hanfy,

To push this forward, I’m working on a CLI-based prototype that compares licenses across two FOSSology-scanned releases using checksum-based file matching. This avoids dependence on specific FOSSology instances, directly addressing the traceability concern raised by @tngraf.
Plan of Action:
Match files using checksums from FOSSology API (instead of paths or instances).

Compare license tags and generate a clean diff (added, removed, changed).

CLI Output for quick checks and easily extendable for ISR integration in SW360.

Optional: Integrate relevance tagging to carry expert annotations across versions.

def compare_versions(v1, v2):
diff = []
for path in v1:
if path in v2 and v1[path]['license'] != v2[path]['license']:
diff.append((path, v1[path]['license'], v2[path]['license']))
elif path not in v2:
diff.append((path, v1[path]['license'], 'Removed'))
for path in v2:
if path not in v1:
diff.append((path, 'New', v2[path]['license']))
return diff
This lightweight approach can serve both incremental reports and full audits depending on the release inputs.

[tngraf]

Misconceptions:

1. There is no way to "guess" what the name of an older version of thge package is: assume the name of the new package is mylib-v1.5.
   Then an older package could be mylib-v1.2, but it could also be mylib 1.2, mylib 1.2.RELEASE, my-lib 1.2, mylib_for_scan 1.2, etc.
   => chances to find a matching older package AND have an advantage from it are pretty low.
2. There is guarantee, that the file tree is the same.
3. ISR is not used by most users => no need to compare
4. "CLI" is NOT command line interface, it is component license information, and XML based file format.
   People who do not know this, should not continue working on this idea.

[SUMITKC1]

Hi @tngraf,

Thank you for the clarification and direct feedback — I now understand the architectural limitations and the correct meaning of CLI as "Component License Information" rather than command line interface. I appreciate your point about the difficulty of reliably matching package versions, variations in file trees, and the limited usage of ISR among users.

I’ll take a step back from this idea for now and re-evaluate my approach based on the existing data structures and workflows already supported in SW360 and FOSSology.

If there are areas where you feel contributions would be more helpful or aligned with project goals, I’d be happy to shift focus accordingly.

Thanks again for your time and guidance!

[GMishx]

Idea!

Title: Improve integration with FOSSology

Goal: Use extended REST API of FOSSology to improve the "Send to FOSSology" feature

SW360 already have ways to interact with FOSSology, however the interaction as of now is very limited. The idea is to expand on this interaction and make use of extended REST API of FOSSology and have features like:

• Upload source to FOSSology
• Search and link to existing sources with checksum match
• Reuse previous version of release uploaded/existing in FOSSology
• Provide option to select agents for scanning in FOSSology
• Fetch different kind of reports from FOSSology, not just SPDX

Relevant information:

• FOSSology REST API: https://github.com/fossology/fossology/blob/master/src/www/ui/api/documentation/openapiv2.yaml
• SW360 existing endpoints: releases/{id}/checkFossologyProcessStatus
• SW360 existing endpoints: releases/{id}/triggerFossologyProcess

Category	Rating
Low Hanging Fruit	***
Risk/Exploratory	**
Fun/Peripheral	***
Core Development	**
Project Infrastructure	**
Project size	Large
Preferred contributor	Student/professional
Skills needed	Java, REST & HTTP libraries

Contact : @GMishx

[AhmedMansour21]

Hello, I am Ahmed Mansour 2025 CS graduate at Benha University, Back-End developer with experience in C++, C#, python, Java and relational database. I am Interested in System Integration, I want to gain Experience In big projects So I am looking forward to Contribute in gsoc 2025 and I would be delighted to participate in and make a contribution to SW360 projects hooping to Gain Experience in Back-End and System Integration fields.

[RAVINDRA-NEGI]

Hi...
"I have experience with Java, REST APIs, and HTTP libraries, and I’ve been working on backend development, including Spring Boot and microservices. I’d love to explore how I can contribute to this!"

[rushipatilGit]

Hi @GMishx,,

Myself Rushieksh, I have close to 15+ years of experience in development, implementation, consulting of software projects, passion for technology and problem-solving,I would love to contribute towrds Open Source project , well versed with technologies such as JAVA, J2EE, Spring Framework,Spring Boot 3.X, Hibernate, Spring Data JPA,Spring Security,JMS, Rest API, Ant/Maven/Gradle as build tools, MS SQL, AWS,GCP & Azure cloud technologies.

I am always eager to learn and adapt to new technologies and methodologies, would love to contribute towrds this exciting Open Source Project.
Please drop me a email at [email protected] , eager to hear from you.

Thanks,
Rushikesh.

[ChaitanyaReddy01]

Hello,
I am Chaitanya Reddy , a 2025 CS graduate at the University of New Haven with experience in Java, Spring Boot, and REST APIs. I am very interested in this project to improve the integration between SW360 and FOSSology using the extended REST API.

I have worked on full-stack applications with Spring Boot, Angular, and MySQL, and I also have experience with CI/CD, Docker, and DevOps tools. I’m always eager to learn new technologies and excited to apply my skills to enhance API interactions and improve automation in this project.

I’m working on my detailed proposal but would love to contribute and grow through this opportunity. Looking forward to collaborating if I get the chance!

[krcoder123]

Hi, I'm Kaushik Raja, a CS student in the University of Illinois Urbana-Champaign. I'm part of my university's Open Source club where I work on projects using C++, Java, Linux, Python, Rest APIs, ReactJS, MongoDB, integrating with LLMs like Gemini API, and Machine Learning.

I am interesting in contributing to SW360 projects. Very excited to being a part of the Open Source initiatives. I am happy to work on any time zones and collaborate with teams and stakeholders. Please add me to the Slack account, in order to connect and discuss with the mentors. My gmail address: [email protected]

[GMishx]

Idea!

Title: Thrift layer removal

Goal: Remove thrift layer for communication with Database

Remove thrift layer which is used to interact with DB as it is not required and makes the installation process of SW360 unnecessarily complex. This change will help project moving forward with modern architectures like micro-services.

Category	Rating
Low Hanging Fruit	*
Risk/Exploratory	***
Fun/Peripheral	**
Core Development	***
Project Infrastructure	**
Project size	Large
Preferred contributor	Student/professional
Skills needed	Java, CouchDB

Contact : @GMishx @smrutis1 @heliocastro

[Sauravhs]

Hello @GMishx , @smrutis1 , @heliocastro.

I am Saurav ! and working in java and I also have some knowledge of CouchDB as the skill needed on this particularly project.
And I'm looking for the opportunity to working on this project as it gain my interest. As I go through the project and I come to know about the project which is basically about Removing the Thrift layer simplifies installation and streamlines the architecture, making it more efficient. This change also supports modern design principles like microservices, enhancing scalability and maintainability.

And I love to contribute my ideas and knowledge on this issue and also very exciting to be become a part of this wonderfull journey GSOC. Let me know if there are some guideline for the project.

[SkullPratyush]

hello there @GMishx
Myself Pratyush ! I am quite proficient in java programming and I also have database experience being a web developer . I am very keen to work on this project since I needed more experience in projects like this which includes java as the core programming language.
I would be obliged to work with the team on this great project

[omarawd7]

Hello @GMishx , @smrutis1 , @heliocastro.

I came across the Thrift Layer Removal project idea for SW360 and am very interested in contributing to it as part of GSoC. Given my microservices, Java programming, and CouchDB background, I believe I can effectively contribute to this initiative.

I have professional experience working with microservices architectures in Java and have previously contributed to open-source projects under the Eclipse Foundation. Additionally, I am currently pursuing a Master’s degree with a focus on software architecture, which has further strengthened my expertise in designing scalable and modern software systems.

I would love to get more context on the project requirements and its current state. Also, if there are any specific demos or proof of concepts that would help demonstrate my understanding and suitability for the project, I would be happy to work on them.

Looking forward to your guidance and insights on how I can best contribute to this effort.

[tngraf]

#Idea!

Title: Have (unit) tests for all REST API endpoints

Goal: It must not happen that a REST API endpoint 'just' does not work

Every REST API endpoint needs a test and all these test have to run before a new FOSSology release is done.

[gkbishnoi07]

Hello! @tngraf 👋 I would love to work on this issue. I specialize in Java, JUnit, REST APIs, GraphQL, and Vitest, and I have experience writing both unit and integration tests to improve code quality. I can help enhance test coverage for all REST API endpoints by writing robust test cases, using Mockito for mocking dependencies, and ensuring proper validation of different request scenarios. Let me know if there are any specific guidelines to follow before I get started. Looking forward to contributing! 🚀

[Shittu24]

Hi everyone,
My name is Ibrahim, and I'm excited about contributing to SW360 as part of GSoC 2025.
I have experience with Java, JUnit, REST APIs, and testing, and I’m interested in the "Improve tests for all REST API endpoints" project.
I have started setting up the project and would love to know any specific areas that need improvement.
Looking forward to learning and contributing!

[frHimanshu]

Hello there, Im Himanshu a First year engineering student who just stepped in world of coding and Development ( very newbie ). It is going to be a hard challenge for me to learn and contribute in GSoC 25, But I like to take challenges!
I would love to hear suggestions from mentors: @GMishx @heliocastro @keerthi-bl

Thank you! Hope your days goes well!

Discord: _himanshu__
Email: [email protected]](mailto:[email protected]

[YashKambaria]

Hello there , I am a Spring Boot Developer and for last 3-4 months i am decently practicing REST APIs and have solved may type of bugs and errors. I had also done JUnit testing. Count me in for "Improve tests for all REST API endpoints"

[krcoder123]

Hi,

Among other ideas I'm interested in this project too. Please consider me as a contributor to this effort.

I'm Kaushik Raja, a CS student in the University of Illinois Urbana-Champaign. I'm part of my university's Open Source club where I work on projects using C++, Java, Linux, Python, Rest APIs, ReactJS, MongoDB, integrating with LLMs like Gemini API, and Machine Learning.

I am interesting in contributing to SW360 projects. Very excited to being a part of the Open Source initiatives. I am happy to work on any time zones and collaborate with teams and stakeholders. Please add me to the Slack account, in order to connect and discuss with the mentors. My gmail address: [email protected]

[amritkv]

Idea!

Title: SBOM based recommendation

Goal: Recommendation of packages based on SBOM of a project

When a user imports a SBOM file, the tool will share the information about the cleared & uncleared packages used in that project based on existing knowledge available in SW360. In addition to that if any package is uncleared,

1. The tool will recommend equivalent package, which is already cleared in SW360, which in turn will reduce the project clearing time
2. If the user still wants to use the same uncleared package, the tool will give an estimated time to clear the package as well as the project

Bellow are rating out of 3.

Category	Rating
Low Hanging Fruit	**
Risk/Exploratory	*
Fun/Peripheral	**
Core Development	**
Project Infrastructure	**
Project size	Large
Preferred contributor	Student/professional
Skills needed	Python, AI/ML

Contact : @amritkv @GMishx

[tngraf]

At Siemens there will be no SBOM import - at least not with the currently available implementation.
Allowing people to import hust any SBOM is a very bad idea.

A tool to analyze an exisiting development project, create a matching project on SW360, suggest component (versions) to be used because they are already cleared, does already exist at Siemens for more than a year and is in productive use at a two-digit number of projects.
Contact me for further details.

[Yashodh99]

I am passionate about the "SBOM-Based Recommendation" project and look forward to contributing to it in GSoC 2025. I have the following questions:

How will performance of the recommendation system be measured? Will this be in terms of reduced clearance time, users take-up, or precision of recommended substitutes?

Should the tool strictly suggest only cleared packages, or can it offer partly cleared ones? Should partly cleared ones be offered, which criteria should be applied?

I would appreciate any advice that you can offer. @amritkv @GMishx

[GMishx]

Idea!

Title: Creating Project as a service in Sw360

Goal: Idea is to create a project as a microservice

The idea is t separate out Project and related modules as separate microservices which can then be used by multiple BU/Org for better customization and still allowing reusing common component repository

Category	Rating
Low Hanging Fruit	-
Risk/Exploratory	*
Fun/Peripheral	***
Core Development	***
Project Infrastructure	**
Project size	Large
Preferred contributor	Student/professional

[ajinkyashivpure]

@GMishx @tngraf @EttingerK
Dear Mentors,

I have been exploring SW360 and its architecture, and I’m highly interested in contributing to the project. While going through the codebase, I noticed that CouchDB is used for handling project data, with ProjectDatabaseHandler leveraging AttachmentConnector for many data related operations . This gave me insight into how the backend interacts with the database, and I would love to delve deeper and contribute meaningfully.

With a strong background in backend development, particularly in Java, Spring Boot, and distributed systems, I have worked on projects involving database management, API development, and event-driven architectures. My experience allows me to quickly understand complex systems and contribute effectively.

I would appreciate any guidance on how I can get started with contributions. Looking forward to collaborating and learning from the community!

Best regards,
Ajinkya

[adithyamohanan]

Hi @GMishx, I’m excited to contribute to the “Creating Project as a Service” project for GSoC 2025. I’m familiar with Java and Spring Boot from personal projects and would love to apply those skills here. Since I’m new to GSoC and open source, I’d appreciate any guidance on how to start—perhaps resources to learn more about SW360 or microservices? I’m thrilled to learn and help!

[UdayaKrishnanM]

Dear Team,

I am excited to express my interest in contributing to the "Creating Project as a Service" initiative. As a beginner with a solid foundation in Java and Spring, I am eager to expand my skills in microservices and RESTful APIs. This project aligns perfectly with my passion for learning and my desire to work on impactful, large-scale projects. I am committed to collaborating with the team to separate Project modules into a microservice, ensuring customization for different organizations while maintaining a common Component repository.

Thank you for considering my application.

[venkatesh799]

Subject: Interest in "Creating Project as a Service in SW360" for GSoC

Hi SW360 Team and @GMishx ,

I hope you're doing well. I am interested in contributing to the "Creating Project as a Service in SW360" initiative for Google Summer of Code. With my experience in Spring Boot, Microservices, and API Gateway, I believe I can add value to this project.

I have built a Quiz Microservices Application consisting of: Quiz Service, Question Service, Service Registry (Eureka), API Gateway,

PostgreSQL as the database

Additionally, I have developed a URL Shortener Service that can generate 3.5 trillion unique short URLs using a fixed 7-character encoding system. The system is built using Spring Boot and PostgreSQL.

The service is deployed on AWS EC2, and it will soon go live on sturl.co

I am excited about the prospect of separating Project and related modules into independent microservices, enhancing flexibility and scalability within SW360. I would love to discuss this further and understand how I can contribute effectively.

Looking forward to your response!

Best regards,
Venkatesh

[vandanabarsaiyan]

Hi @GMishx I am excited to contribute on this initiative. I have prior experience working in java, spring boot and microservice architecture, I would love to apply these skills here while exploring and learning more about the open source environment. Let me know if I can start contributing to this project.
Thanks.

[KoukiHama]

---

Idea: Update Official Documentation Page

Motivation

The current official documentation page (https://eclipse.dev/sw360/) lacks clear instructions regarding environment configurations and upgrade procedures for recent software versions. This discrepancy often confuses users and negatively affects productivity during installation or updating processes. Keeping the official documentation accurate and up-to-date helps attract new users and fosters an active user community. Moreover, documentation updates do not require direct changes to the software source code, allowing contributors to undertake this task concurrently with other development or testing activities, thus lowering the barriers for OSS contributions.

Proposed Changes

• Clearly document environment setup instructions and upgrade procedures corresponding to the latest software versions.
• Complement missing details in documentation, such as updates to dependencies and version compatibility, reducing user confusion.
• Enhance visual clarity by adding practical examples and screenshots illustrating the updated procedures.

Notes

• This task involves no source code modifications, making it easy to execute alongside other development tasks or community activities.
• Documentation updates are valuable contributions to OSS projects and serve as excellent entry points for new contributors.
• It is advisable to explicitly recognize documentation maintenance as a significant and formally acknowledged form of OSS contribution.

---

---

Category	Rating
Low Hanging Fruit	***
Risk/Exploratory	*
Fun/Peripheral	**
Core Development	*
Project Infrastructure	***
Project size	Medium
Preferred contributor	Student/professional

---

[KoukiHama]

@KoukiHama Can we create a proposal for these topics to better structure the improvements and align contributions?

@shilpa053020
Yes, we can. Let discuss proposal on the discussion thread.

https://github.com/eclipse-sw360/sw360.website/discussions

[vikasp07]

Hi @KoukiHama , I'd love to contribute to improving SW360 documentation and the website. I have hands-on experience with Docker setups, technical writing, and modern UI/UX design. I'm keen on enhancing installation guides, version-specific docs, and multilingual support. Count me in! 🚀

[techmannih]

Hey everyone,
I’m currently working on Website Improvements (UI/UX & Content) and installation setup, will be raising some PRs soon. I’m really excited to get feedback from my mentor and continue improving the project!

[bipulsikder]

Respected @GMishx @heliocastro @KoukiHama ,

Go thorugh the News section implementation to my localhost eclipse-sw360/sw360.website#115 (comment)
I am working harder for this project though its perfectly aligns to my Skills, I would Soon drop my proposal .

Thanks
Bipul

[github-hiya]

Hi, @GMishx @EttingerK

I’m Hiya, a 2nd-year Computer Science undergraduate at Savitribai Phule Pune University. I’m passionate about open source and eager to contribute to GSoC 2025, specifically in SW360 and FOSSology.

I have experience in frontend development, C++, Python, and Java. I’m keen to enhance my skills, collaborate with the open-source community, and gain hands-on experience. Additionally, I am open to contributing to the official documentation update and improving project documentation for better accessibility.

I'd appreciate guidance on getting started with relevant projects and best practices for open-source contributions. Looking forward to learning and contributing!

Thank You,
Hiya Shah
Email: [email protected]

[murthy30300]

I’m Vishnu Murthy, a Pre Final year B.Tech student at KL University, and I'm highly interested in contributing to SW360 for GSoC. My expertise includes Java, Spring Boot, React, and AWS, aligning well with the project’s tech stack.
I’ve built projects in cloud deployment, including a Food Waste Reduction Platform using Spring Boot & React and an ATS-compliant Resume Analyzer. My experience in microservices, CI/CD, and compliance automation makes me eager to work on license compliance and SBOM management in SW360.
Have a look on My spring boot Project- Link
I’d love to discuss potential contribution areas and any first steps to get involved. Looking forward to your guidance!
Best,
Vishnu Murthy

[vikasverma101]

please provide format of proposal

[Kana121]

Hi, I’m Kanhaiya, a Java & Spring Boot developer interested in contributing to SW360 for GSoC 2025. I’d love to get started. Can someone guide me on setting up the project and picking a beginner-friendly issue?

[Kana121]

i am troubling to download org.eclipse.sw360 dependancies

[SUMITKC1]

If anyone has the proposal format, please share it. Thank you!

[bipulsikder]

Respected @GMishx @heliocastro @KoukiHama ,

Go thorugh the News section implementation to my localhost #115
I am working harder for this project though its perfectly aligns to my Skills, I would Soon drop my proposal .

Thanks
Bipul