Greetings all,

I am somewhat new to Maven plugin development and would like to ask the
developer community for some feedback and help in developing a plugin to
generate project license metadata compliant with the Software Product Data
Exchange (SPDX) standard.
 
The SPDX specification is a standard format for communicating the
components, licenses and copyrights associated with a software package.  We
are on version 1.2 of the spec and is in use at several of the SPDX
participating companies (see www.spdx.org for more info).
 
The motivation for the plugin was the result of a discussion between Phil
Odence and myself (from SPDX) and Jim Jagielski and Henri Yandell (from
Apache) on ideas for how Apache projects could produce or utilize SPDX.  It
was suggested that a maven plugin would substantially reduce the effort for
several Apache projects.
 
Over the past couple weeks, I have studied the Maven Mojo and plugin API's
and produced a prototype which will generate an SPDX file based on a POM
file.  You can find the code on Github at
https://github.com/goneall/spdx-maven-plugin
 
Here's my questions for the Maven Developers:
- Is anyone on the list interested and have some time to collaborate on the
plugin?  I'm pretty comfortable on the Java and SPDX output coding, but I'm
new to Maven and could use some experienced review of some of my choices
regarding Maven parameters and implementation.  A review of the code would
be most appreciated.  I could also post the more specific questions to this
list if that is appropriate.
 
- Are there any related efforts I should be aware of?  (Note: I did find
another spdx maven plugin on github.  I reached out to the author and have
not heard back, so I'm not sure how active the project is).
 
- Once the plugin is built and unit tested, what is the best way to make it
more accessible to other developers?
 
- A spreadsheet mapping the SPDX properties to either spdx-maven-prototype
configuration parameters or existing Maven model properties can be
downloaded at
https://github.com/goneall/spdx-maven-plugin/blob/master/SPDX-fields-maven-m
apping.xlsx.  Feedback on the prototype choices are welcome.  There is also
a proposed longer term mapping, some of which extends the current Maven
model.
 
Thanks in advance,
Gary
 
 
-------------------------------------------------
Gary O'Neall
Principal Consultant
Source Auditor Inc.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Reply via email to