Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

Add “NONE” to the license expression syntax

It looks like NONE is not in the [SPDX 3.0 license expression syntax](https://spdx.github.io/spdx-spec/v3.0/annexes/SPDX-license-expressions/). Since this is a non-breaking change, moving this to 3.1

Make the matching template formats of license part of the spec - add matching guidelines annotation to SPDX licenses and to NON-SPDX licenses.

Since this is a non-breaking change, moving this to 3.1

Allow byte range to be optional in Snippets

This is resolved in 3.0 - it is now optional

Multiple licenses: unclear specification

@swinslow @mlinksva @fulldecent - this is a rather old issue. Is this something we should move to a change proposal? close? For now, I'll move this to 3.1 since it...

Add “NOASSERTION” to the license expression syntax

It looks like the [SPDX 3.0 license expression](https://spdx.github.io/spdx-spec/v3.0/annexes/SPDX-license-expressions/) still does not include NOASSERTION. Since this would not be a breaking change, I'm moving this to the 3.1 milestone.

Obligations, Risks, Restrictions part of the software delivery in B2B case

Moving to 3.1

Permit SHA256 to be optionally used rather than SHA1 as "mandatory" file hash

We no longer require a specific file hash in 3.0. Closing this specific issue. If we want to include a specific file hash, please open a new PR (soon) as...

Expand License namespaces available

Moving to 3.1.

Incompatibility in comment property for license between JSON and RDF/XML

This is resolved in 3.0 - closing

Add new relationship DOCUMENT_ROOT_OF

Since this is a non-breaking change, moving to 3.1.