1. posterid:548471
  2. End Of Life Tag in spdx

Re: End Of Life Tag in spdx #spdx

Kate Stewart
 

Hi Sandeep,

     There is a pull request expected shortly from the Usage profile team, to add this specific field to 2.3.
When it comes in,  please feel free to review and make sure it's going to suffice for your needs.

For now, with 2.2 documents,  suggest you use the Package Comment field (https://spdx.github.io/spdx-spec/package-information/#720-package-comment-field) and standardize on a tag (like EndOfSupport: ) and the date. 

Will that work for now?

Thanks, 
Kate


On Fri, May 6, 2022 at 2:27 PM Patil, Sandeep via lists.spdx.org <sandeep.patil=philips.com@...> wrote:
Hi All, 
We have requirement to specify End Of Life as part of package information in SBoM ,
Is there way current SPDX format support this ? 

Regards
Sandeep 

Join spdx@lists.spdx.org to automatically receive all group messages.