Gary O'Neall

Match expressions for license templates fail when using white space

5

When there is a white space used in a pattern for the `

If a license template has the following form: ``some text that doesn't affect the outcome some optional text make this complext more text`` it will fail since the match template...

Add a license expression validator to LicenseExpressionParser and the command line tools

1

Requested by David Wheeler for the web validation project as a feature for the online tool. To support this, we can add a method "validate" to the class LicenseExpressionParser which...

Schema update - remove list from the possible list element

1

Related to issue #1680 Signed-off-by: Gary O'Neall

License information

1

I didn't see a license notice file doing a quick look at the project. Do you use an open source license (e.g. Apache-2.0 or MIT)? If so, could you add...

Review referenced document structure

9

Referencing artifacts in external documents seems to be structurally incompatible with the approach taken in SPDX. Propose we review the 2 approaches (SBOM and SPDX) with concrete examples and determine...

Change Snippet class structure to be compatible with W3C pointer definition

4

Propose changing the SBOM Snippet class structure and attribute names to be compatible with SPDX and W3C pointer definitions Add classes StartEndPointer, (abstract) singlePointer, byteRangePointer and LineCharPointer Add properties byteRange...

Merge CopyrightInformation class with the LicenseInformationClass

3

Propose merging the CopyrightInformation class with the LicenseInformationClass to simplify the model. It is very unlikely one would be present without the other. Propose new class name of CopyrightLicenseInformation or...

Remove checksum as a required element for the Document

3

This is a proposed structural change. Background: The document is the actual artifact containing the BOM itself. Creating a checksum and storing in itself is mathematically impossible since storing the...

Change document creation information back to a format compatible with SPDX

2

This is a structural change to the current model. Currently, creation information is in the attributes author and specVersion. In SPDX, these are in a single attribute creationInformation which contains...