FYI, I have a conflict for this morning’s SPDX implementer’s call, so I thought I would send a couple updates via email. I’ve started working on updating the SPDX java libraries to the SPDX 3.0 spec.

I have a question about the PackageVerificationCode field when generating an SPDX document. The field is documented here: https://spdx.github.io/spdx-spec/v2.3/package-information/#79-package-verifica

Hello Everyone, Thanks for those that responded to the call to file a joint comment to CISA for the self-attestation call for comments, but I’m sorry to say we did not reach a critical mass (10 partic

I highly recommend listening to this podcast from a genuine expert on VEX and VDR. Steve is an engineer that has implemented both VEX and VDR and is well qualified to provide an expert opinion, based

Hello SPDX Implementers: We have our bi-monthly call tomorrow. On the agenda for tomorrow: Proposal to open this call to tooling users as well as implementers? SPDX 3.0 RC1 Tooling Implementers progre

Thanks, Dick Brooks Active Member of the CISA Critical Manufacturing Sector, Sector Coordinating Council – A Public-Private Partnership Never trust software, always verify and report! ™ http://www.rel

Hello SPDX Implementers! Reminder that we are continuing our discussion around “What makes a quality SBOM” tomorrow at our usual meeting time (8am PST/11am EST/5pm CEST). We will use the regular https

Hello Everyone, During this week’s implementers call I suggested that we all try to create an SPDX SBOM from a common Apache Distribution. I’ve attached a validated, SPDX V 2.2 SBOM for the Apache Tom

Hello SPDX Implementers, Reminder that we are continuing our discussion around “What makes a quality SBOM” tomorrow at our usual meeting time (8am PST/11am EST/5pm CEST). We will use the regular https

Reminder that our discussion around “What makes a quality SBOM” is happening tomorrow! I hope you can make it 😊 8am PST/11am EST/5pm CEST. Use https://meet.jit.si/SPDXImplementersMeeting to join. Note

There is a scheduled SPDX implementers call tomorrow, December 14th (8am PST/11am EST/5pm CEST - https://meet.jit.si/SPDXImplementersMeeting) but due to the end of year vacations I’m not sure we will

Hi Philippe, The question from Rose comes from my ticket in Tern: https://github.com/tern-tools/tern/issues/1188 It would be very good if you can help Rose to implement a better solution than the Lice

Hi there, This is a question regarding LicenseRefs, specifically for the PackageLicenseDeclared field. Tern is a tool that can generate SPDX documents for containers. When we are collecting license in

There is a scheduled SPDX implementers call tomorrow, November 16th (8am PST/11am EST/5pm CEST - https://meet.jit.si/SPDXImplementersMeeting). I’ll plan to join tomorrow and host whoever shows up. Do

We didn’t cover much given the short meeting but a PR for this week’s meeting minutes is available for review: https://github.com/spdx/meetings/pull/191/files#diff-b6d198f07f2d146f3e04889b30268a504b8a

The SPDX implementers meeting is tomorrow, June 15th (8am PDT/11am EDT/5pm CEST - https://meet.jit.si/SPDXImplementersMeeting). Here’s the agenda: Approve meeting minutes from the last call. 2.3 Schem

Hello SPDX Implementers, Last week’s meeting minutes are available to review: https://github.com/spdx/meetings/pull/185. Please take a look and let me know if there’s anything that needs changing (you

Hello SPDX Implementers, The second SPDX implementers meeting is tomorrow, June 1st (8am PDT/11am EDT/5pm CEST). Here’s the agenda: Approve meeting minutes from the last call. Please add your tool to

Hello SPDX Implementers, As discussed in the inaugural call today, the SPDX Implementers meeting will take place every other Wednesday at 8am PDT/11am EDT/5pm CEST moving forward. I have updated the c

SPDX Implementers Meeting When: Wednesday, June 1, 2022 8:00am to 9:00am (UTC-07:00) America/Los Angeles Repeats: Every 2 weeks on Wednesday Where: https://meet.jit.si/SPDXImplementersMeeting Organize