tools-python
tools-python copied to clipboard
spdx
A Python library to parse, validate and create SPDX documents.
The f-strings used in the code are very old and quite verbose when you are dealing with multiple parameters and longer strings. Python3.6 introduced a new style f-string which are...
CONTRIBUTING.MD file should also describe how a commit message should be written or rather what a commit message should be. There is a [recent commit](https://github.com/spdx/tools-python/commit/209a92563ea321403e0e8abc2308644367d73996) in a PR whose title...
According to section 3.8.1, 3.8.3, 3.8.4, 3.9.3 and 3.10.3 of SPDX 2.2 specs: > ## 3.8 Files Analyzed > 3.8.1 Purpose: Indicates whether the file content of this package has...
Can someone recommend the best way to transform pip freeze output into SPDX objects? Are these packages supposed to be represented as File object? Here is an example pip freeze...
Looking at https://raw.githubusercontent.com/spdx/spdx-spec/development/v2.2.1/ontology/SPDX-2.2.png it appears that a File object is accessible through the package object. However, my editor (notepad++) isn't seeing the File object, when I try to access with...
I've found that relationships are not added as per SPDX spec-v2.1. There was a GSoC project to update SPDX Python libraries, but I believe it didn't add relationships. Correct me...
Several changes to the JSON and YAML formats were discussed and generally agreed on for the SPDX 2.2 spec. There is a PR with changes to the example file: https://github.com/spdx/spdx-spec/pull/149....
RDF and TAG/VALUE file formats have two different ways to write SPDX IDs throughout a SPDX Document (document ID, file ID, annotation ID, package ID, etc). For RDF files: `[DocumentNamespace|DocumentURI]#[SPDX...
The file write_tv.py in examples is not able to write to the sample.tag file. Errors are displaying showing that the document is invalid and spdx_id undefined.
