Hi Everyone, I finally got myself some time to collect some initial topics regarding the linking profile for 3.0. I was thinking of adding individual threads, but I think that for now maybe we want to make sure we are bringing the priority topics forward. Here are the things I was thinking of discussing:
1. The name. I recall integration being suggested by Nisha, and having
some pushback on linking (as it is reminiscent of http hyperlinking).
I'm not too against integration profile, I like "artifact flow" but
that's a mouthful. Ideas welcome!
2. The existing overlap with the current relationship property. It feels
they fill similar roles, yet there are nuances. Here's what I could
gather:
- Relationships are intended to document *how* artifacts connect to each
other. I may be missing a little context here so I'd appreciate to
have more ideas around this.
- ~links~ are intended to provide artifact flow integrity (i.e., to
ensure these relationships are integral). They also focus on
authenticating creators and consumers
3. If this overlap is taken care of this properly means:
- not-links could be "secure relationships", which opens the can of
worm of inheritance vs reference vs contains
- not-links could be a completely different animal (e.g., an
annotation) and as such we can take the conversation in another
direction.
I think these are the overarching discussions to have. I believe that
probably figuring out 2 will set the tone for 3, so we can probably
start there :)
I hope this helps stirring discussion!
Cheers!
-Santiago
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#3879): https://lists.spdx.org/g/Spdx-tech/message/3879
Mute This Topic: https://lists.spdx.org/mt/73362126/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
signature.asc
Description: PGP signature
