Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

Add location to document Creator Tool Metadata information to ensure reproducibility

ping @kestewart

Relationship: add BASED_ON or IMPLEMENTATION_OF

moving to 3.1 as it is not a breaking change

SPDX coverage from what FOSSology covers

This may be a good issue to add to the [operations](https://github.com/spdx/meetings/tree/main/operations) profile team.

SPDX coverage from what FOSSology covers

Moving to 3.1 - the target for the profiles team.

License expression semicolon operator

Moving to 3.1 for consideration. cc: @swinslow

Need to be able to express Dependencies on a range of versions.

I ~~think~~ this is a non-breaking change, so I'm moving it to 3.1. @kestewart - let me know if you think this may lead to a breaking change.

Update index.md

@kestewart - We may have some other contributors we missed - we'll add suggestions to this pull request (from the tech call on 16 April)

Update index.md

10+ days after initial review, going ahead and merging

Automatic checks for missing license headers

Just for reference, this was an Google Summer of Code project to perform a similar function. It is no longer being maintained and is archived here: https://github.com/spdx/license-coverage-grader

Support SPDX JSON output format

> should we drop RDF then? I would definitely prioritize JSON ahead of RDF, but I don't see a reason to drop RDF as a format since it is already...