abderrahim commented on PR #2095:
URL: https://github.com/apache/buildstream/pull/2095#issuecomment-3585118975

   > I'm not entirely sure I'm following. As I understand it, a "package" is an 
SPDX term for basically any inputs you are describing in the document, whether 
it's tar balls, directories, etc. A "package" is just the name of a thing in 
SPDX-land.
   
   Yeah, in SPDX there are only "packages" and "files". In 
[buildstream-sbom](https://gitlab.com/BuildStream/buildstream-sbom/), we're 
representing both elements and sources as "packages", though some sources (e.g. 
`patch`) might be better represented as files instead.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to