ilans

- Added a "Visual Editor" tab to the nav bar. - Embedded "dots" in an iframe. - Wrapped "block1" with a "dots" block so the iframe could stretch the entire...

[SPDX 3.0.1] AbstractClass is prefixed with <http://spdx.invalid./>

5

In spdx-model.ttl: @prefix ns7: . ns7:AbstractClass a owl:Class . etc... @zvr Assuming that's invalid :grin:

ExternalIdentifier based on its ExternalIdentifierType

2

From [ExternalIdentifierType](https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Vocabularies/ExternalIdentifierType/): > [implicit] [identifier](https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Properties/identifier/) must be valid based on its [ExternalIdentifierType](https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Vocabularies/ExternalIdentifierType/). Suggested SHACL shapes: ```ttl @prefix sh: . @prefix spdxcore: . @prefix spdxextidtype: . spdxcore:ExternalIdentifierStringByTypeShape a sh:NodeShape ; sh:targetClass...

Can hasHost Relationship link to Build

6

In `RelationshipType`: > hasHost: The from Build was run on the to Element during a LifecycleScopeType period (e.g. the host that the build runs on). In the `Build` profile: >...

From [profileConformance](https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Properties/profileConformance/): > Conformance to a profile is defined by the additional restrictions documented in the profile specific documentation and schema files. The "schema files" is probably a leftover. I...

Alternative SHACL shape for abstract classes

1

Our currect implementation which requires adding a SHACL shape (sh:not [ sh:hasValue ...) for each abstract class, works fine as long as the data graph wasn't applied any inference (rdfs,...

ElementCollection Constraints

1

From [ElementCollection](https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Classes/ElementCollection/): > If the ElementCollection has at least 1 element, it must also have at least 1 rootElement. > The element must not be of type SpdxDocument. > The...

CVSS and EPSS property rules

1

Rules: - CVSS [score](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Properties/score/) must be between 0-10 with 1 decimal place. - CVSS [severity](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Properties/severity/) must match the CVSS [score](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Properties/score/) range. - CVSS [vectorString](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Properties/vectorString/) must match the CVSS version. -...

hashValue with valid HEX and length that matched the algorithm

1

From [HashAlgorithm](https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Vocabularies/HashAlgorithm/): > {'adler32': 8} > {'blake2b256': 64} > {'blake2b384': 96} > {'blake2b512': 128} > {'blake3': '64...'} > {'crystalsDilithium': [2624, 3904, 4840, 5056, 5184, 6586, 8000, 9190, 9728]} > {'crystalsKyber':...

VulnAssessmentRelationship rules

1

Rules: - [VexAffectedVulnAssessmentRelationship](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Classes/VexAffectedVulnAssessmentRelationship/) must be of type: affects. - [VexFixedVulnAssessmentRelationship](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Classes/VexFixedVulnAssessmentRelationship/) must be of type: fixedIn. - [VexNotAffectedVulnAssessmentRelationship](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Classes/VexNotAffectedVulnAssessmentRelationship/) must be of type: doesNotAffect. - [VexUnderInvestigationVulnAssessmentRelationship](https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Classes/VexUnderInvestigationVulnAssessmentRelationship/) must be of type: underInvestigationFor. -...