Hello SPDX,

Is the spec page for 3.0 up to date 
here<https://spdx.github.io/spdx-spec/v3-draft/>? I have a colleague trying to 
prepare for adding SPDX 3.0 support and from what I can tell the 3.0 draft spec 
page is mostly identical to 2.2<https://spdx.github.io/spdx-spec/>.

They’ve also looked at the current 3.0 vulnerability 
PR<https://github.com/spdx/spdx-spec/pull/510/files> and an older 3.0 
vulnerability profile SBOM from 
snyk<https://gist.github.com/garethr/d53ddbbfa5d10ab8ab1b5ef72cd8333b> and it 
doesn’t seem to line up with the 3.0 draft spec.

Does anyone have any more info about this or know where I could find a more up 
to date 3.0 draft spec?

Thank you!
-Rose


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#4483): https://lists.spdx.org/g/Spdx-tech/message/4483
Mute This Topic: https://lists.spdx.org/mt/90843684/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to