Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

Add examples for Golang

@swinslow @nishakm - do we need any more examples or should we close this?

Remove ecosystem from PURL requests

@lumjjb - could you do a quick review. The PR basically removes the package name, version, and ecosystem if a purl is present.

Add examples for Python

[Example 10](https://github.com/spdx/spdx-examples/tree/master/example10) has been added for a simple python project. This covers one of the bullets above, there there are still two examples worth adding.

Add general software profile example

Based on @zvr comment above - I'll go ahead and merge

HTTP 400 Error occurs when trying to convert SPDX to OSV. (spdx-to-osv-0.1.2-jar-with-dependencies.jar)

Thanks @ups-oikawa for reporting this. Feel free to create a pull request to fix. Otherwise, I should be able to create a PR to fix in the next week or...

HTTP 400 Error occurs when trying to convert SPDX to OSV. (spdx-to-osv-0.1.2-jar-with-dependencies.jar)

@ups-oikawa I created PR #32 to resolve this issue - a bit more involved than I expected. I'll wait a couple of days to see if there are any review...

HTTP 400 Error occurs when trying to convert SPDX to OSV. (spdx-to-osv-0.1.2-jar-with-dependencies.jar)

@mpierrau - I guess it's been more than a few days for the review - thanks for the ping. I just merged the PR which should resolve the issue. Let...

External document references not used with JSON formatted dependencies

@MazeJack - that would be great. Let me know if you need any help understanding the code.

External document references not used with JSON formatted dependencies

@MazeJack -The Java code that generates the external relationships will probably need to be modified. The source file [SpdxDependencyInformation](https://github.com/spdx/spdx-maven-plugin/blob/master/src/main/java/org/spdx/maven/utils/SpdxDependencyInformation.java) is responsible for creating the external document references. Here's a link...

Document URI's not formatted correctly in RDF/XML format

Note: the JSON format works fine