Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

Standards Fields

@goneall to ask Matthew and @kestewart to see if we can resolve

Standards Fields

@matthewhjcrawford @kestewart - could you take a look at the request and see if a pull request could be created?

Standards Fields

@kestewart to work on a draft for version 3.0 RC2

Standards Fields

@kestewart @matthewhjcrawford - @sbarnum and I put some time into trying to model this and we came up with a number of questions and alternatives (e.g. should this really be...

Standards Fields

Based on discussion in the AI meeting on 14 Feb 2024, we'll push this until 3.1 and just rename `standard` to `standardName` for 3.0.

SPDX 2->3 conversion of filesAnalyzed

Kate and I discussed this - perhaps we should introduce an "Integrity Profile" in release 3.1.

Proposal: change externalId to externalPrefixOrId

Decision: Leave as is, the solution is compatible so it could be implemented post 3.0 if it does become an issue.

Improve support for commercial licensing use cases

> needing to record/communicate the purchase order, type of license, renewal and expiration for acquired packages @tsteenbe Kate and I were discussing and thought this related to the Usage profile...

Create SpdxId type for spdxId property

Although this would be convenient for some serializations, it would add complexity to others. In RDF, you can always check the type of the subject to find out if it...

Create SpdxId type for spdxId property

I'm running into other issues with the subclassing conventions used - for example, in RDF, there is no class known as `none`. There is a class known as `owl:thing` which...