Note: lists.spdx.org will be down for maintenance this evening, starting at 6PM Pacific Time (1AM Tuesday 10/22/2019 UTC), for two hours.
Re: In favour of what are §4.9–4.11 deprecated?
On nedelja, 28. julij 2019 22:15:26 CEST, Gary O'Neall wrote:
[G.O.] The idea is that there would be a package definition. It could be in a separate SPDX document, or more likely, as a separate SPDX package definition within the same SPDX document. The originating package definition could have the FilesAnalyzed set to false which allows for a rather small number of required fields. The origin could then be indicated by a relationship between the file and the package.I see. Is there already any tooling available to make this actually usable in practice? Sw360, DejaCode?
P.S. Sorry about the late reply, I had a lot going on in the past few weeks/months.