Dear all, I would like to propose an agenda topic for tomorrow's SPDX Tech Team meeting: the precise format of the SpecVersion property on each Element.
During last week's Canonicalisation Committee meeting we discussed the factors for a canonical represenation of this property's data type. However, it became apparent that many aspects of the discussion were out of scope for the Canonicalisation Committee, and should be brought up with the wider Tech Team. On the draft SPDX 3.0 model diagram, each Element has a SpecVersion property indicating which version of the SPDX Specification the Element is conformant to. The data type of SpecVersion refers to the 'Semantic Versioning' scheme described at https://semver.org - known simply as 'SemVer'. At the Canonicalisation Committee meeting we came up with three option for the SpecVersion property's data type: 1: A structured data type composed of integers corresponding to the major, minor and patch levels 2: A plain string 3: Enumeration (enum) type of specification versions published by SPDX It's worth noting that No.1 can only express a subset of the full Semantic Versioning specification, which supports extra tags like 'release candidate' and 'alpha'. The main criteria that came up in the meeting was the ability for tooling to ignore or reject SPDX data that is of a version not supported by that tool. If the types of changes represented by the major, minor and patch levels are rigorously defined and consistent, tools would be able to determine compatibilty automatically with No.1. This is more nuanced when considering the Canonical Serialisation, since this could make feature releases (usually minor changes) breaking, major changes. Clearly, a tool can not implement the canonical represenation of a value introduced in the future! Yet, a tool merely performing analysis on the data fields it understands can just ignore the newly added fields. No.3 would also allow for automated compatibility determination, but only for SPDX specification versions that it is hard-coded to understand, due to the 'semantic' elements of the version specifier being opaque to the tool. Looking forward to hearing everyones' views on this! Best wishes, Sebastian -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4513): https://lists.spdx.org/g/Spdx-tech/message/4513 Mute This Topic: https://lists.spdx.org/mt/91144916/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
