tools icon indicating copy to clipboard operation
tools copied to clipboard

Ambiguity in SPDX documentation in relation b/w files and filesAnalyzed fields

Open Moullisha opened this issue 1 year ago • 1 comments

As per the below code snippet, if filesAnalyzed is true, files array must contain any files related to the package. No clear correlation between the files and the filesAnalyzed field has been mentioned in the SPDX document.

image

Moullisha avatar Dec 13 '23 11:12 Moullisha

@Moullisha - We are switching over to a new version of the utility https://github.com/spdx/tools-java and the library https://github.com/spdx/spdx-java-library

Could you check and see if the same issue is in the new version? It's unlikely this utility will be updated except for critical security issues.

goneall avatar Dec 13 '23 17:12 goneall