scope:

Purpose

This NASA Procedural Requirements (NPR) establishes procedures and responsibilities for the reporting, review, assessment, and release of software created by, or for, NASA. These procedures reinforce that NASA software is reported and released, both internally and externally, according to law and NASA policies, with appropriate restrictions on the use and redistribution of the software. The unrestricted release of NASA software, as defined in Appendix A, is prohibited.

Applicability

a. This NPR is applicable to NASA Headquarters and Centers, including Component Facilities, including JPL to the extent required by its contract. b. This NPR is applicable to the reporting, review, assessment, and release of all software:

(1) Created exclusively by, or jointly with, NASA employees as part of the NASA employee's official duties;

(2) Created by a non-Federal party where intellectual property rights to the software have been assigned to the U. S. Government, or have been licensed to the Government where the license authorizes the Government to further release the software; or,

(3) In the lawful possession of NASA, except as otherwise stated in subparagraphs d through g.

c. This NPR applies to release of NASA software that:

(1) Was developed for, is being, or has been used in a NASA program.

(2) Was produced by, or for, NASA.

(3) May have significant commercial value or significant utility to potential private or public sector users or applications outside of NASA. Mobile applications (apps) are covered under this NPR.

d. This NPR does not apply to software that has been classified pursuant to Executive Order (E.O.) 12958, Classified National Security Information, by an Original Classification Authority and is designated and marked as Top Secret, Secret, or Confidential.

e. This NPR does not apply to software released without restriction as to use or disclosure prior to October 17, 1997 (the original issue date of NPD 2210.1, Release of NASA Software), unless such software has been modified to add new functionality since it was released.

f. This NPR does not apply to bug fixes. Bug fixes alone may be released without complying with the requirements of this NPR. Previously released software that has been modified only by incorporating bug fixes may be released to the same recipient(s) without requiring additional reporting, reviews, or agreements under this NPR. For applicability of this NPR to minor code enhancement of pre-existing software, see paragraph 1.10.3 F-G.

g. This NPR does not apply to Scientific Research Demonstration Software (as defined in Appendix

A) that is developed and used for the purpose of supporting a scientific publication. Such publication-related software may be released with the scientific publication, but, as part of the NPR 2200.2, Requirements for Documentation, Approval and Dissemination of Scientific and Technical Information, review process for dissemination of scientific and technical information, the author/management is responsible to confirm that the related software meets the requirements set forth in the definition of Scientific Research Demonstration Software. The ability to distribute such software under NPR 2200.2 does not also permit the inclusion or release of any underlying software that may be related to the subject of the scientific publication, which would still need to be reported and released under NPR 2210.

h. This NPR does not apply to computer databases, websites, or software documentation, as defined in Appendix A unless such documentation discloses software source code.

i. In this directive, all mandatory actions (i.e., requirements) are denoted by statements containing the term "shall." The terms: "may" or "can" denote discretionary privilege or permission, "should" denotes a good practice and is recommended, but not required, "will" denotes expected outcome, and "are" and "is" denote descriptive material.

j. In this directive, all document citations are assumed to be the latest version unless otherwise noted.