Billie Alsup

Question regarding license_expression_parser behavior

2

src/spdx_tools/spdx/parser/jsonlikedict/license_expression_parser.py uses License().parse(expr) directly, rather than get_spdx_licensing().parse(expr) as used in parser/tagvalue/parser.py. The difference results in a different LicenseSymbol for GPl-2.0, e.g. ``` >>> from license_expression import Licensing >>> Licensing().parse('GPL-2.0') LicenseSymbol('GPL-2.0',...

Validation performance extremely poor

5

I am finding that validation is extremely slow (taking 3+ hours to validate a document that took a fraction of the time to create). A sample cProfile run shows ```...

ExternalPackageRefCategory problems

2

An internal tool is failing to validate SPDX files which use PACKAGE_MANAGER as an ExternalPackageRefCategory. Presumably PERSISTENT_ID would fail validation as well. According to [SPDX 2.2.2 spec](https://spdx.github.io/spdx-spec/v2-draft/package-information/#722-external-reference-comment-field), those underscores should...