Meret B.
Meret B.
fixes #246 Signed-off-by: Meret Behrens
The field "licenseListVersion" appears as a field of [CreationInfo](https://github.com/spdx/tools-python/blob/c0aa92a3a4779fe189c72b5e1d85a18267f6e45a/spdx/creationinfo.py#L148) and as a field of [Document](https://github.com/spdx/tools-python/blob/c0aa92a3a4779fe189c72b5e1d85a18267f6e45a/spdx/document.py#L302). When executing `convertor.py data/SPDXJsonExample.json output.tag` the licenseListVersion is parsed correctly but not written to the...
Looking at the tools-python in more detail we observed some inconsistencies concerning the builder. The current implementation of the builder classes is dependent on the file format. We suggest to...
When parsing a rdf file the SPDXID of a file contains the whole path to the spdxID in the graph. For example converting the example file [SPDXRdfExample.rdf](https://github.com/spdx/tools-python/blob/main/tests/data/formats/SPDXRdfExample.rdf) to a .tag...
In the current [implementation](https://github.com/spdx/tools-python/blob/c0aa92a3a4779fe189c72b5e1d85a18267f6e45a/spdx/writers/jsonyamlxml.py#L480) all packages are written to the "documentDescribes"-Tag. According to the [JSON-example](https://github.com/spdx/spdx-spec/blob/development/v2.2/examples/SPDXJSONExample-v2.2.spdx.json), packages should be listed in a tag "packages" and "documentDescribes" should only contain the SPDXIDs...
I discovered the following line in the [example file](https://github.com/spdx/spdx-spec/blob/386ce342a28f12d31b77a549261857eda16f9304/examples/SPDXTagExample-v2.3.spdx#L337) for tag-value: > LicenseCrossReference: http://people.apache.org/~andyc/neko/LICENSE, http://justasample.url.com From my understanding of the spec and also the analogous example file in rdf where...
The [spec](https://spdx.github.io/spdx-spec/v2.3/file-information/#816-file-dependencies-field-deprecated) says that the field FileDependencies is deprecated in favor of using relationships. for the refactored version of the python-tools we try to replace deprecated field wiith the favoured...
When trying to parse the [SPDXRdfExample-v2.2.spdx.rdf](https://github.com/spdx/spdx-spec/blob/development/v2.2.2/examples/SPDXRdfExample-v2.2.spdx.rdf.xml) with the python-tools the above question has arisen. Looking into the rdf ontolgy, the html spec and the provided example files I encountered different...
As an addition to #305 this issue should be used to increase the test coverage for all new parser. We need more negative tests and more tests that catch single...
- [ ] complete migration mapping table: - [x] add spdx 2.3 properties - [x] add translation to 3.0 - [x] open issues in the SPDX-3 repo for remaining translation...