https://bugs.linuxfoundation.org/show_bug.cgi?id=1148
--- Comment #6 from Bill Schineller <[email protected]> 2013-08-29 19:01:18 UTC --- Bill's notes from concall of 8/29/2013 downsized Proposal for 1.2: For use case of source files that were used to produce each binary file in a package of software being shipped: ---> if an SPDX producer creates a single package (archive) containing the binaries and the sources ---> new field, 'FileDependency' under File. Value is a reference (relative internal filepath of another File node elsewhere in the same SPDX doc) For use case of external libraries that the software depends on at runtime: ---> just use the existing Comment field under File. (deferring modeling of External File References for SPDX 2.0) ---> possibly existing artifactOf fields in 1.2 can handle the external Use Case?? -- Configure bugmail: https://bugs.linuxfoundation.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. _______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
