Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

How to list multiple WITH exceptions

Moving this to 3.1 for consideration. cc: @swinslow

SPDX XML doesn't reference a schema

> Can you depreciate XML entirely instead? We're actively discussing what serialization formats to support for SPDX 3.0. There is a significant number of tool developers who would like to...

SPDX XML doesn't reference a schema

SPDX 3.0 will only support JSON-LD - moving this to 3.1 where we will consider additional serialization formats.

Specifying strong hashes (e.g. SHA-256+) for `ExternalDocumentRef` in SPDX 2.2

This is no longer applicable for 3.0 - closing

Fix continuous integration DCO sign-off check

@kestewart - we need to fix the DCO signoff - let's leave this open - it's marked as a draft, so I'll need to do a review if the PR...

Inconsistency in the date format example and specification

In the SPDX 3.0 spec, we use the actual REGEX, so I think this can be closed. @zvr if you disagree, please open a new issue or (better yet) pull...

Inconsistency in the syntax of comments in tag-value format

We will be replacing tag/value in 3.0 - closing this issue since any change prior to 3.0 would be a breaking change. cc: @kestewart

"Code Rule applied" tag for Functional Safety

Functional safety is being added to 3.1 - moving to the 3.1 milestone

relax valid character restriction in names

I believe this is different enough in 3.0 we can close this issue. @zvr @kestewart if you disagree, please re-open or open a more specific issue.

Annotations object doesn't have SPDXID property in json spec2.2

This is resolved in 3.0 - closing