Marc-Etienne Vargenau comments

Results 57 comments of


                                            Marc-Etienne Vargenau

Duplicate packages after merge

> @vargenau v0.2.0 has been released please give it a shot. Yes, I have seen it. I will check. Thank you for the improvement.

OPENSSL and zlib not recognized as valid licences

Yes, I still have the issue. ``` pyspdxtools -i OPENSSL-zlib.spdx.json ERROR:root:The document is invalid. The following issues have been found: Unrecognized license reference: zlib. license_expression must only use IDs from...

Have ScanCode output conformant to OpenChain Telco SBOM Guide

@mjherzog What are the other use cases? Which CISA SBOM Type should be selected in these cases?

ERROR: Could not find a version that satisfies the requirement extractcode-7z>=16.5.210525

This seems to be a duplicate of https://github.com/aboutcode-org/scancode-toolkit/issues/3539

How to convert from SPDX 2 to SPDX 3

Thank you very much @goneall for your answer. I have created a pull request https://github.com/spdx/tools-java/pull/171 to add it to the README file.

How to convert from SPDX 2 to SPDX 3

The conversion works, but I have many warnings. ``` [main] WARN org.spdx.library.model.v2.SpdxElement - No creation info for document Optional[hello] [main] WARN org.spdx.storage.listedlicense.SpdxListedLicenseModelStore - SPDX listed license URL was used instead...