The model (https://github.com/spdx/spdx-3-model/blob/main/model.png) shows: 1) Actor has no properties 2) Element is created by [1..*] Actors
V3 has a complex Identity model, but at a minimum it should be possible to accommodate simple creator identifiers from version 2 without any links to external dentity management systems. Tag format ( https://github.com/spdx/spdx-examples/blob/master/example1/spdx/example1.spdx ): Creator: Person: Steve Winslow ([email protected]) Creator: Tool: github.com/spdx/tools-golang/builder Creator: Tool: github.com/spdx/tools-golang/idsearcher Created: 2021-08-26T01:46:00Z JSON format: "creationInfo" : { "created" : "2010-01-29T18:30:22Z", "creators" : [ "Tool: LicenseFind-1.0", "Organization: ExampleCodeInspect ()", "Person: Jane Doe ()" ], "licenseListVersion" : "3.9" } Examples of corresponding v3 Actor elements are necessary to fix the v3 model. Questions that need to be resolved: 1) Is an element created by a single Actor element with multiple identifiers or by many Actor elements each with a single identifier? I believe an Actor can be a person representing an organization using tools, or a committee of people or a consortium of organizations, and that that collection of identifiers should be a reusable single Actor that performs the act of creating an element. Because in v3 each element has its own creation information, having to re-specify a list of Actors for each element is unwieldy and unnecessary. 2) Is an identifier structured with its type and syntax, or just a string as in v2? a: {"person": {"name": "Jane Doe", "email": "[email protected]"}} b: "Person: Jane Doe" I prefer explicitly structured, with a list of identifier syntaxes: email, purl, etc. Examples will need to be validated against the model: the current v3 model says that elements are createdBy Actor elements, but the example given on the model diagram shows createdBy an Identity element. Here is an example Actor element with identifier properties, created by a single Actor. { "id": "urn:spdx.dev:iamwillbar", "type": { "actor": [{ "person": { "name": "William Bartholomew", "email": "[email protected]" }, "organization": { "name": "Microsoft" } }] }, "creator": "urn:spdx.dev:iamwillbar", "created": "2022-05-02T20:28:000Z", "specVersion": "3.0", "profiles": ["Core"], "dataLicense": "CC0-1.0" } -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4821): https://lists.spdx.org/g/Spdx-tech/message/4821 Mute This Topic: https://lists.spdx.org/mt/94712988/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
