Hi Anthony, This issue is documented here as well: https://github.com/spdx/spdx-spec/issues/813 and also similar to https://github.com/spdx/spdx-spec/issues/792 which was resolved by allowing both – and _: https://github.com/spdx/spdx-spec/pull/793. Based off these issues I would assume either is correct but Gary can confirm.
-Rose From: [email protected] <[email protected]> on behalf of Anthony Harrison via lists.spdx.org <[email protected]> Date: Tuesday, April 11, 2023 at 7:42 AM To: [email protected] <[email protected]> Subject: [spdx-tech] Clarifcation on Package Purpose !! External Email According to Clause 7.24.1, of SPDX 2.3 spec, OPERATING-SYSTEM is a valid package purpose. However if I look at the JSON spec (https://github.com/spdx/spdx-spec/blob/master/schemas/spdx-schema.json), this is OPERATING_SYSTEM (note the subtle difference between the - and _). The online validator allows OPERATING_SYSTEM and not OPERATING-SYSTEM as a valid purpose. There is clearly some inconsistency here. Which is correct? (For reference, the equivalent value in CycloneDX is 'operating-system') Anthony !! External Email: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#5069): https://lists.spdx.org/g/Spdx-tech/message/5069 Mute This Topic: https://lists.spdx.org/mt/98199005/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
