Steve Winslow

Hi @lumjjb -- based on https://github.com/coreinfrastructure/best-practices-badge/blob/main/doc/implementation.md#authentication and the next section below it, I _think_ that you should have access to the BadgeApp form for the SPDX Golang tools if you...

Unfortunately, it looks like https://github.com/knaak/rdf doesn't use a real license -- see https://github.com/knakk/rdf/blob/master/LICENSE. And, it appears the author is not willing to add one, see https://github.com/knakk/rdf/issues/15. Given that, and given...

If you're looking at making a new library to parse and handle RDF data, feel free -- I certainly won't argue =) I'd just say, keep in mind that writing...

RDF parsing merged in PR #46. There are some things to address for which I'll file separate issues. I'll keep this issue open until the RDF writing side of things...

Hi @sei-vsarvepalli, here's a modified version of this file which I believe should be a valid SPDX 2.3 file: [SPDX-ACME-INFUSION-1-0-SBOM-DRAFT-30-8-2022-13-23-spdx-revised-for-2.3.txt](https://github.com/CERTCC/SBOM/files/11092159/SPDX-ACME-INFUSION-1-0-SBOM-DRAFT-30-8-2022-13-23-spdx-revised-for-2.3.txt)

For ease of tracking, the changes I've made here for 2.1 to 2.3 are: * changing the SPDXVersion from SPDX-2.1 to SPDX-2.3 * removing the `PackageLicenseConcluded`, `PackageLicenseDeclared` and `PackageCopyrightText` fields...

adding value, I know :) @royaljust I noticed this while putting together the PR for adding O-UDA-1.0 to the SPDX license list. If this can be merged now, I'll include...

Thank you @ShaneCurcuru! Appreciate your input here. Based on this, I take it as a pretty clear position from ASF that SPDX should _not_ use "Apache" in the name or...

Thanks @chadwhitacre! We'll stand down on this for now, and will hold off to see what you and ASF work out in your separate discussions.

Hi @chadwhitacre, wanted to check back and see whether the FSL stewards have decided on a different name / ID to avoid use of the term "Apache" for this one,...