Gary O'Neall
Gary O'Neall
> Hi [@goneall](https://github.com/goneall) I had not checked the validity of the file with RC2. However, both tools-python and tools-java version 1.1.8 say the file is valid SPDX. And I do...
I think most, if not all, the errors are due to the `FilesAnalyzed` flag not being specified on packages that do not have the files or `PackageVerificationCode` fields for `FilesAnalyzed=True`...
@vargenau - Can this issue be closed?
@vargenau - I'll go ahead and close this based on the above comments - but if you feel it is still an issue, please re-open or create a new issue
I noticed there is an `isPackagedBy` relationship type - how would that be used in "relation to" the `instancedOf` relationship type?
> I noticed there is an `isPackagedBy` relationship type - how would that be used in "relation to" the `instancedOf` relationship type? In looking back at the presentation, most of...
Thanks @zvr for the diagrams and descriptions - I have no more questions and the proposal makes sense to me. The challenge will be documenting this in a way readers...
From the 5 August 2025 tech call, there were 3 high level issues to be followed-up on: - Direction of the relationship - Balance of exchanged document size vs. consumer...
> Balance of exchanged document size vs. consumer implementation complexity Three possible solutions were raised during the 5 August, 2025 tech call 1. Not allow components within documents - Note:...
From tech call on 2 Sept 2025: - Proposal to merge this in - the outstanding issues can be resolved in a how-to guide - Could merge this into the...