Our new approach builds on the best of past approaches. The mainstay report is an enhanced spreadsheet that combines the graphical look-and-feel of the interactive report with all the details of Appendix A and more. We complement that with a completely revamped Executive Summary Report that provides a narrative crafted specifically around the various issues discovered in the codebase. It summarizes the overall status, then each area of risk, and leverages the data behind our annual risk report to compare the codebase to industry averages along a number of dimensions. Additionally, we provide a License List Report that includes text from all open source licenses relevant to the codebase. It also includes any unusual custom license terms that we have unearthed.
Going forward, all reports will be Excel or PDF with no fancy embedded scripting, so you can easily share them with colleagues or advisors via email or post them to a virtual data room. We will distribute reports via Citrix ShareFile, the highly secure, industry-standard portal.