https://bugs.linuxfoundation.org/show_bug.cgi?id=1123
Bill Schineller <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED Target Milestone|1.1 |2.0 --- Comment #3 from Bill Schineller <[email protected]> 2015-03-10 17:31:55 UTC --- SPDX 2.0 introduces Relationships to external SPDX Documents. That's the best / ideal way to support 'provenance' There is text in SPDX 2.0 section 4.9 saying: "To make it easier for recipients of the SPDX file to determine the original source of the identified file. If the project is not described in an SPDX Document, then ArtifactOf can be used. If the project is described in another SPDX Document, then Relationship should be used" Resolving as I think we've clarified -- Configure bugmail: https://bugs.linuxfoundation.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. You are the assignee for the bug. _______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
