Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

How to handle symlinks in SPDX documents?

It looks like this is still an open question - moving to 3.1 since it likely would not involve a breaking change

Embedding SPDX into binaries

Moving to SPDX 3.1 for consideration.

In external repo identifiers, add homepage URL and repo URL

Since this isn't a breaking change, moving to the 3.1 milestone for consideration

Inconsistency between tag/value and model for PackageVerificationCode Excluded Files

Since 3.0+ will have a significantly different tag/value format, closing this issue. cc: @kestewart

ID inside annotations

This is resolved in 3.0 - closing

Finding SPDX files for external documents

Moving to 3.1 for consideration.

Finding SPDX files for external documents

> This is an SPDX 2.X problem only; SPDX 3 makes it much easier to combine multiple documents together which makes this unnecessary Thanks @JPEWdev - I'll close this issue

Ambiguity for Snippet location in tag-value documents

Since we are not implementing tag/value in the 3.0 release and the current proposed tag/value replacements are significantly different, I'm going to close this issue. cc: @kestewart

Proposed Usage Language; soliticiting input on the proposed direction

Moving to the 3.1 milestone for consideration

Combine Package external reference and external reference comment

This is a stale issue w.r.t. 3.0, closing