Kate Stewart
Kate Stewart
Agree this needs to be improved, but we're missing a PR to update the documentation at this point, and relationship directionality are being revisited in 3.0, so moving this issue...
So... SPDXRef-DOCUMENT describes SPDXRef-A SPDXRer-DOCUMENT describes SPDXRef-B SPDXRer-DOCUMENT describes SPDXRef-C But if A contains B & C, then SPDXRef-DOCUMENT DOCUMENT_ROOT_OF SPDXRef-A Key here only one DOCUMENT_ROOT_OF. From discussion - we...
From discussion, unless William wants to raise a flag, we'll move DOCUMENT_ROOT_OF to 3.0. Pull request needed if want in 2.2.
Based on call today, this can be fixed for the spec in 2.2, but the license list will be inconsistent and that will be addressed in 3.0
Based on call, we will use comment for JSON in 2.2, and make XML compatible in future release. So no change in 2.2 Specification, and we'll resolve in 3.0. Should...
Proposal will be a breaking change, so call concensus is to move it to 3.0
Use case from Gary: how know part of the information, but not all, so useful to understand what still need to be done. ie. may know that 20 different license...
Steve ok with if there are use cases in the practice. Key don't want to mandate it as every package has "AND NOASSERTION". We don't want to see this abused....
Moving this to be discussed for 3.0 as it may result in incompatibilities, and assigning to Steve to weigh in on.
This looks like something we can put into 2.2, (after specifics are figured out). Needs tech team discussion.