DMTF
Removal of disclaimer that libspdm is not fit for production
libspdm readme known limitation states “This package is only the sample code to show the concept of SPDM and should not be considered fit for production.” This invites question on what changes would be required for it to be production worthy. Can we revisit removing this or modifying it to say something along the lines of "what quality bar it passes" and let users make decision on production worthiness? Or if we have a stronger stance t say the intent is to use it in production but without any liability, that might work too.
There was a point when libspdm really shouldn't have been used in production, but that was conveyed through the version / tag number in addition to the disclaimer. I think now the disclaimer should just be removed and folks can evaluate the code and tests to see if it meets their production needs.
@jyao1 did DMTF require the disclaimer or was that entirely your words?
