SPDX Tech folks, I'm curious, does anyone know if the spdx/tools-go <https://github.com/spdx/tools-go> repo is being actively maintained or developed right now? Just looking at the commit history, my guess is that it's not... it looks like it was originally written by Vlad Velici, but that he's no longer working on it? So then I guess a better question is if anyone is really interested in it? Do you know if anyone is actively using it?
I'm investigating using it in some work we're doing here at Google (since all of our existing compliance tooling is already in Go), and so had two questions that related to the above: 1. If I send some changes, is there anyone around to merge them? (Philippe looks to have merged the last couple of PRs) 2. Who might I break if I made major changes? That is, how important is backwards compatibility? (I haven't looked at the code closely enough to know whether I would even propose any breaking changes, but curious to know from the outset who would be impacted) Also, does anyone have a sense of how widely adopted the various versions of SPDX are? For our initial purposes, we only care about 2.1, since that's what scancode-toolkit emits. 1.x and 2.x seem different enough that supporting both would be a bit of work, so I'd be tempted to drop 1.x support altogether. (Again, provided that this wouldn't actually break any active users) Thanks, Will
_______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
