Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

Schema Generators: change pluralization for licenseInfoInSnippet

This should be fixed in SPDX Spec version 3.0.

Schema Generators: change pluralization for licenseInfoInSnippet

Since this would create an incompatibility in the schema - I'm not going to fix this until SPDX 3.0 where the spec states that all properties will be in the...

Add unit tests that exercise issue #234

Thanks @pmonks - creating unit tests will help in diagnosing/fixing the issues. It may be a while before I can look at these issues - I'm prioritizing getting the SPDX...

SPDX 2.3 spec: NTIA's The Minimum Elements for an SBOM

Thanks @winterrocks for pointing this out - indeed, this is recommended and not required and the table is inconsistent. I would suggest we just remove this row to make the...

efitools: exchangable license exception GPL <-> LGPL

Interesting question - since this is more legal related, I would suggest posting this to the legal mailing list: https://lists.spdx.org/g/spdx-legal cc: @jlovejoy @swinslow

efitools: exchangable license exception GPL <-> LGPL

Closing this issue as not spec related.

Official CC-BY-4.0 license text is not being matched correctly by LicenseCompareHelper.isTextStandardLicense()

Thanks @pmonks for the analysis - I'm currently traveling for the next week or so - I'll take a look once I'm back

copy new license made via issue to request license online tool

A couple of hints on this one: - There's an API on the online tools where you can interact programmatically. - I think (but have not verified) @alantse uses this...

Add missing SPDX file

Still a good idea - but since this is non-breaking, moving this to 3.1

Limit requests per hour

Will this limit the rate on all requests or just the license submittal? The request I'm most concerned about is the [check license](http://13.57.134.254/app/check_license/). It would be good to limit all...