Hi Kotrappa,

 

Unfortunately, we do not have a tool to provide this functionality today.

 

If you're looking for merging the file information from more than one SPDX
documents into a single SPDX document representing a new package, the
following steps should work:

- Merge the file level information into the document

- Recalculate the packageVerificationCode

- Merge the licenseInfoFromFiles (this is more of a set union operation,
there should not be any duplicate file references)

- Check to see if the package level concluded license or declared license is
impacted by the merge

 

Note that the above will result in a single package description in a single
file.  The current specification does not support multiple packages being
described in the same file.  In SPDX 2.0 (currently under development), we
will support multiple package descriptions within the same file.

 

It would be a small to medium effort to add a merge tools - I'll add that on
the list of new project ideas.

 

The source code for the tools are available under the Apache 2.0 license at
git.spdx.org under the spdx-tools project if you would like to contribute
this functionality yourself.

 

Gary

 

 

From: [email protected]
[mailto:[email protected]] On Behalf Of
[email protected]
Sent: Monday, February 10, 2014 4:29 AM
To: [email protected]
Cc: [email protected]; [email protected]
Subject: [SPDX Tools] Query regarding tool to combine multiple .spdx files
to a single .spdx file.

 

Hi,

 

This is Kotrappa, I am from Wipro Technologies, India.

We have been using FOSSology+SPDX module for open source analysis.

Recently we visited SPDX workgroup tools page for format conversion and
compare tools.

For our automation requirement, we need "SPDX file merge tool" i.e.
something which merges multiple .spdx files into a single .spdx file.

Is there any tool for the same, or Will it work if we combine contents of
multiple .spdx files into a single .spdx file?

 

 

Best regards

Kotrappa.

 

 

The information contained in this electronic message and any attachments to
this message are intended for the exclusive use of the addressee(s) and may
contain proprietary, confidential or privileged information. If you are not
the intended recipient, you should not disseminate, distribute or copy this
e-mail. Please notify the sender immediately and destroy all copies of this
message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should
check this email and any attachments for the presence of viruses. The
company accepts no liability for any damage caused by any virus transmitted
by this email.

www.wipro.com

_______________________________________________
Spdx-tech mailing list
[email protected]
https://lists.spdx.org/mailman/listinfo/spdx-tech

Reply via email to