But does it answer William's question: "Can we say that once deserialized to a logical model and then strictly serialized to a defined format and hashed then that is sufficient?"
It needs to yield the same value when hashing the XML and JSON serializations of the identical SBOM. On Tue, May 31, 2022 at 11:19 AM Nisha Kumar <[email protected]> wrote: > I like this idea! It helps with sorting of the key-value pairs. However, > I'm not sure how the group thinks about maintaining a library in > different programming languages for this. > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4542): https://lists.spdx.org/g/Spdx-tech/message/4542 Mute This Topic: https://lists.spdx.org/mt/91310709/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
