spdx-spec icon indicating copy to clipboard operation
spdx-spec copied to clipboard

An example of using relationshipType_dependencyOf in RDF format

Open alinavalovenko opened this issue 3 years ago • 0 comments

Hello team, could please provide me with an example of using relationshipType_dependencyOf to describe SPDXRef-A is dependency of SPDXRef-B.

here the example of how I understood the documentation, could please check if that example is correct one or no?

<spdx:relationship>
      <spdx:Relationship>
        <spdx:relationshipType rdf:resource="http://spdx.org/rdf/terms#relationshipType_describes"/>
        <spdx:relatedSpdxElement>
          <spdx:Package rdf:about="http://somescan#SPDXRef-Package1">
            <spdx:name>contact-form-7</spdx:name>
            <spdx:versionInfo>5.6.2</spdx:versionInfo>
            <spdx:supplier>NOASSERTION</spdx:supplier>
            <spdx:downloadLocation>NOASSERTION</spdx:downloadLocation>
            <spdx:packageVerificationCode>
              <spdx:PackageVerificationCode>
                <spdx:packageVerificationCodeValue>c5d9ce7d745688ce4aff4bef0b94ede434072bef</spdx:packageVerificationCodeValue>
              </spdx:PackageVerificationCode>
            </spdx:packageVerificationCode>
            <spdx:copyrightText rdf:resource="http://spdx.org/rdf/terms#noassertion"/>
            <spdx:licenseConcluded>
              <spdx:ListedLicense rdf:about="http://spdx.org/licenses/GPL-2.0-or-later">
                <spdx:name>GNU General Public License v2.0 or later</spdx:name>
                <spdx:licenseId>GPL-2.0-or-later</spdx:licenseId>
                <spdx:licenseText>License Text:</spdx:licenseText>
              </spdx:ListedLicense>
            </spdx:licenseConcluded>
            <spdx:licenseInfoFromFiles rdf:resource="http://spdx.org/licenses/GPL-2.0-or-later"/>
            <spdx:licenseDeclared rdf:resource="http://spdx.org/licenses/GPL-2.0-or-later"/>
            <spdx:hasFile>
              <spdx:File rdf:about="http://somescan#SPDXRef-file1fc907680905fe58f1e2abb0a252e3ce5">
                <spdx:fileName>contact-form-7-master/CONTRIBUTING.md</spdx:fileName>
                <rdfs:comment/>
                <spdx:checksum>
                  <spdx:Checksum>
                    <spdx:algorithm rdf:resource="http://spdx.org/rdf/terms#checksumAlgorithm_sha256"/>
                 <spdx:checksumValue>ac967633c6d653e53ddc41a1f919dd645c9688427f1320185e9095628311d519</spdx:checksumValue>
                  </spdx:Checksum>
                </spdx:checksum>
                <spdx:checksum>
                  <spdx:Checksum>
                    <spdx:algorithm rdf:resource="http://spdx.org/rdf/terms#checksumAlgorithm_sha1"/>
                    <spdx:checksumValue>bf9a13dbf67b98e752171a182ea3881e17674e8e</spdx:checksumValue>
                  </spdx:Checksum>
                </spdx:checksum>
                <spdx:checksum>
                  <spdx:Checksum>
                    <spdx:algorithm rdf:resource="http://spdx.org/rdf/terms#checksumAlgorithm_md5"/>
                    <spdx:checksumValue>1fc907680905fe58f1e2abb0a252e3ce</spdx:checksumValue>
                  </spdx:Checksum>
                </spdx:checksum>
                <spdx:copyrightText rdf:resource="http://spdx.org/rdf/terms#noassertion"/>
                <spdx:licenseConcluded rdf:resource="http://somescan#LicenseRef-GPL"/>
                <spdx:licenseInfoFromFiles rdf:resource="http://somescan#LicenseRef-GPL"/>
              </spdx:File>
            </spdx:hasFile>
          </spdx:Package>
        </spdx:relatedSpdxElement>
      </spdx:Relationship>
    </spdx:relationship>
    <spdx:relationship>
      <spdx:Relationship>
        <spdx:relationshipType rdf:resource="http://spdx.org/rdf/terms#relationshipType_describes"/>
        <spdx:relatedSpdxElement>
          <spdx:Package rdf:about="http://somescan#SPDXRef-PackageDependency-1">
            <spdx:name>contact-form-7</spdx:name>
            <spdx:versionInfo>5.6.2</spdx:versionInfo>
            <spdx:downloadLocation>https://github.com/takayukister/contact-form-7/archive/v5.6.2.tar.gz</spdx:downloadLocation>
            <spdx:filesAnalyzed>false</spdx:filesAnalyzed>
            <spdx:licenseConcluded rdf:resource="http://spdx.org/licenses/GPL-2.0-or-later"/>
            <spdx:licenseInfoFromFiles rdf:resource="http://spdx.org/licenses/GPL-2.0-or-later"/>
            <spdx:licenseDeclared rdf:resource="http://spdx.org/licenses/GPL-2.0-or-later"/>
            <spdx:copyrightText rdf:resource="http://spdx.org/rdf/terms#noassertion"/>
            <spdx:relationship>
              <spdx:Relationship>
                <spdx:relatedSpdxElement rdf:resource="http://somescan#SPDXRef-Package1"/>
                <spdx:relationshipType rdf:resource="http://spdx.org/rdf/terms#relationshipType_dependencyOf"/>
              </spdx:Relationship>
            </spdx:relationship>
          </spdx:Package>
        </spdx:relatedSpdxElement>
      </spdx:Relationship>
    </spdx:relationship>
    
thanks in advance

Best regards,

Alina Valovenko

alinavalovenko avatar Sep 08 '22 11:09 alinavalovenko