Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update fwos and add unmio #126

Closed
wants to merge 0 commits into from

Conversation

jorgefl0
Copy link
Contributor

@jorgefl0 jorgefl0 commented Nov 6, 2024

No description provided.

@cre8
Copy link
Contributor

cre8 commented Nov 8, 2024

Hi @jorgefl0
can you explain why you added Paradym as a dependency? They have listed their agent already as a solution. The definition of a dependency is more the dependency of an SDK, not on what services an agent relies on.

It also seems that unimo is more like a product that is using agent and wallets, but is not a normal agent by the specification since all the agent part is coming from Paradym. So I would more see Unimo like a case study, showing where paradym is used.

@jorgefl0
Copy link
Contributor Author

jorgefl0 commented Nov 8, 2024

Good day @cre8 ,

I listed Paradym for transparency in the submission. Paradym as a solution enables a software developer to provision cloud agent infrastructure via RESTful API. Does this not meet the "definition" of a dependency? We actually maintain a separate open-source component Paradym Connector as well, part of the farmworker-wallet-os project .

I'm not sure I understand the distinctions you are trying to make. There are already examples of listings that implement other dependencies. Some are annotated accordingly and others are not. Presumably this is because the "dependencies" tracking was added recently?

BC Gov, Holdr+ for example implement Bifold which in turn implements Credo. Similarly, Hologram implements Credo.

Looking at this from a SBOM perspective, it will be interesting to see the complete dependency graph develop over time for the items in this listing. Credo for example implements other relevant SDKs outside of the dependencies formerly annotated. Notable examples are:

Regarding Unmio, Unmio is a low-code solution offering that can be adapted or "white-labeled" to specific business contexts. www.unmio.com is an implementation of this offering but we hope in time there will be more. Perhaps I can change the urlWebsite to the marketplace listing?

@cre8
Copy link
Contributor

cre8 commented Nov 11, 2024

Hi @jorgefl0

Yeah, dependency was added like one month ago so most of the entries are not referencing it correctly.
The main goal of the dependencies is the reference to SDKs, that can be used by others. It is not the goal to reference all packages from e.g. the package.json, but to highlight relevant projects for attention. You are right that credo is not a direct dependency, but a dependency of bifold. It would make the overview quite complicated and only highlight bifold as the direct reference. Maybe there is an update required for the logic.
I didn't have time to scan all project to add the dependencies by myself, so hopefully the providers or anyone else will do this in the future.

The wallet and agent entries should be apps/products with the primary focus on digital identities and credentials. There are however solutions like unmio where digital identities are part of the product. By adding this, it would be an overview of all products that have digital identities integrated, but not offering it for other products. I would like to bring this questions to the next meeting to discuss this with other people and then come back to you.

@jorgefl0
Copy link
Contributor Author

Hi @cre8

I have removed the Paradym dependency and cleaned up the corresponding metadata output.

@cre8
Copy link
Contributor

cre8 commented Jan 15, 2025

@jorgefl0 are you able to solve the merge conflict? I do not have the permission to work on your fork

@jorgefl0
Copy link
Contributor Author

hi @cre8 I always seem to have issues resolving merge conflicts so I submitted a new PR from a new branch and discarded this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants