I'd like to clarify "that was installed via apt(1) from the upstream repository". If we're using the default repositories, then it makes sense to use Ubuntu, or Canonical, as the Supplier. However, a user can update apt to use a different package repository, one not necessarily affiliated with Ubuntu/Canonical. If so, I would think that the Supplier should be based on that repository, and not based on Ubuntu, even if the user is using apt on an Ubuntu distro.
Do you agree with that conclusion? (Sorry Alexios, accidentally responded to just you initially. Now responding to the group). -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4979): https://lists.spdx.org/g/Spdx-tech/message/4979 Mute This Topic: https://lists.spdx.org/mt/96551804/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
