Hi Rose,
No - that version of the SPDX spec has not been updated. The most up to date version 3 information is the model in the tech team minutes <https://github.com/spdx/meetings/blob/main/tech/Model.png> . We have a separate repo SPDX-3-Model <https://github.com/spdx/spdx-3-model> which looks like it is also in need of an update. It is, however, much more current than the SPDX spec 3.0 github pages. Perhaps we should remove the SPDX 3.0 Github pages or refer them to a more current version. Maybe a good topic for today's tech team call. Regards, Gary From: [email protected] <[email protected]> On Behalf Of Rose Judge Sent: Monday, May 2, 2022 12:22 PM To: [email protected] Subject: [spdx-tech] SPDX 3.0 draft spec? Hello SPDX, Is the spec page for 3.0 up to date here <https://spdx.github.io/spdx-spec/v3-draft/> ? I have a colleague trying to prepare for adding SPDX 3.0 support and from what I can tell the 3.0 draft spec page is mostly identical to 2.2 <https://spdx.github.io/spdx-spec/> . They've also looked at the current 3.0 vulnerability PR <https://github.com/spdx/spdx-spec/pull/510/files> and an older 3.0 vulnerability profile SBOM from snyk <https://gist.github.com/garethr/d53ddbbfa5d10ab8ab1b5ef72cd8333b> and it doesn't seem to line up with the 3.0 draft spec. Does anyone have any more info about this or know where I could find a more up to date 3.0 draft spec? Thank you! -Rose -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4486): https://lists.spdx.org/g/Spdx-tech/message/4486 Mute This Topic: https://lists.spdx.org/mt/90843684/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
