Re: SPDX Bake off to compare tools generating code for the SPDX 2.1 specification on October 6, 2016.

Sam Ellis <Sam.Ellis@...>



Whilst preparing for SPDX bakeoff I noticed a few issues with my interpretation of the specification that may be worth discussion.


Firstly a number of fields in tag files contain arbitrary text enclosed within <text>...</text> tags. I found examples where the text I am including within these tags does itself contain HTML/XML tags from the source document. The inclusion of non-SPDX tags within the <text> tags makes it hard to spot the end of the </text>. This raises the question of whether the text within <text> tags ought to be escaped in some way? I did not find anything on this point in the SPDX specification (apologies if I missed anything).


Secondly, I noticed that in the tag field PackageLicenseInfoFromFiles I am including license exceptions, for example:


PackageLicenseInfoFromFiles: Classpath-exception-2.0


However, I think my use is incorrect. The spec says a license identifier is needed here, and a license exception identifier is not a license identifier. I cannot alternatively use "license WITH exception" here because this is an expression not a license identifier. This raises the question, how should exceptions be represented in PackageLicenseInfoFromFiles, if at all?


I appreciate your thoughts on these issues.


From: spdx-tech-bounces@... [mailto:spdx-tech-bounces@...] On Behalf Of Kate Stewart
Sent: 22 September 2016 19:58
To: spdx-tech@...; SPDX-general
Subject: SPDX Bake off to compare tools generating code for the SPDX 2.1 specification on October 6, 2016.



The SPDX tech team will be hosting an SPDX Tools BakeOff at LinuxCon Europe on 6 October 2016.  Participation can be remote by phone or in person. The Bake-off (also known by some as a Plugfest) will focus on comparing SPDX Documents generated with SPDX specification 2.1 features along with answering any questions people may have about the new revision.

For more information on how to participate,  please read Background info for the SPDX 2.1 Bake-off in LinuxCon Europe.    

If you have questions, please send email to spdx-tech@...

Thanks on behalf of the SPDX tech team,   Gary & Kate


IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

Join to automatically receive all group messages.