https://bugs.linuxfoundation.org/show_bug.cgi?id=1148
--- Comment #1 from Bill Schineller <[email protected]>
2013-08-27 21:18:16 UTC ---
(in google doc draft, this had been proposed)
14. File Dependencies
1.Purpose: This field provides a place for the SPDX file creator to record a
list of other files (using their SHA1 identifiers) which the file is a
derivative of and/or depends on for the build (e.g., source file or build
script for a binary program or library). The list of files may not necessarily
represent the list of all file dependencies, but possibly the ones that impact
the licensing or may be needed as part of the file distribution obligation.
2. Intent: Here, the intent is to provide the recipient of the SPDX file with
file dependency information
based on the build system that created the file. These other files typically
impact the licensing of the file and/or may be required to satisfy the
distribution obligation of the file (e.g., source files subject to a copyleft
license).
3. Cardinality: Optional, zero or more.
4. Data Format: There are two components, an algorithm identifier (SHA-1), a
separator (â:â) and a
160 bit value represented as 40 hexadecimal digits.
5. Tag: âFileDependency:â
Example:
FileDependency: SHA1: d6a770ba38583ed4bb4525bd96e50461655d2758
FileDependency: SHA1: 53f410f780bf5659aa100aa0161c2d5229944d2b
FileDependency: SHA1: a1ba9edd7b8da6965bf4b8474139bc6f32ab524a
6. RDF: property spdx: fileDependency in class spdx:File
Example:
<File rdf:about=âhttp://www.spdx.org/tools#SPDXANALYSIS?fileâ>
<fileDependency>SHA1:
d6a770ba38583ed4bb4525bd96e50461655d2758</fileDependency>
<fileDependency>SHA1:
d6a770ba38583ed4bb4525bd96e50461655d2758</fileDependency>
<fileDependency>SHA1:
d6a770ba38583ed4bb4525bd96e50461655d2758</fileDependency>
</File>
--
Configure bugmail: https://bugs.linuxfoundation.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
_______________________________________________
Spdx-tech mailing list
[email protected]
https://lists.spdx.org/mailman/listinfo/spdx-tech
