Gary O'Neall
Gary O'Neall
The following tasks need to be completed for the 2.3 release: - [x] Complete review period (end of day Wednesday 10 August 2022) - [x] All issues in the 2.3...
The spec for the PackageVerificationCode tag/value format implies a cardinality of excluded files of 1: ``` Tag: PackageVerificationCode: (and optionally (excludes: FileName)) FileName is specified in section 4.1. Example: PackageVerificationCode:...
The [Created field](https://github.com/spdx/spdx-spec/blob/development/v2.2.1/chapters/document-creation-information.md#69-created-field-) in the document Creation information specifies `The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard....
The CI is failing on the v3-draft and v2-draft branches with the following error: ``` Traceback (most recent call last): File "/usr/local/bin/mkdocs", line [5](https://github.com/spdx/spdx-spec/runs/7449013575?check_suite_focus=true#step:5:6), in from mkdocs.__main__ import cli File...
Proposal: Introduce a value for related SPDX element UNKNOWN defined as there being a related element but the identity of the related element is unknown. Background: In the SPDX spec...
Adding this relationship will support the use case where an auditor, analyst, package supplier or packager would like to communicate specific components that are distributed to clients. For example, JavaScript...
The RDF property `spdx:describesPackages` was deprecated when SPDX 2.0 was released and has been replaced by the `documentDescribes` in non-RDF format and the relationships in RDF. Retaining this property is...
Current SPDX 3.0 model does not support the use case where an annotation is created which refers to an Element in a separate Document. This is due to the Annotation...
There are several properties used in the SPDX Listed Licenses which are not documented in the specification. They are currently documented in the RDFa terms used section of the [Accessing...
The [XML schema example](https://github.com/spdx/spdx-spec/blob/development/v2.2/examples/SPDXXMLExample-v2.0.spdx.xml) follows the same pattern as the JSON and YAML formats. It is not clear if the result is acceptable to a typical XML producer or consumer....