Dear spdx-tech community, Thank you for discussing Lite Profile at the previous meeting.
We drafted profile-level.md. However, we found some issues, so let me discuss them. https://github.com/OpenChain-Project/OpenChain-JWG/blob/master/subgroups/sbom-sg/outcomes/SPDX-Lite/Proposal_v3.0/model/Lite/SPDX-Lite.md 1. Which class and element should be used to represent a license with or without an SPDX short ID? It seems to reconfigure Licensing classes in issue#399. (https://github.com/spdx/spdx-3-model/pull/399) 2. Do we need to list external properties restriction at profile-level.md that already have minCount:1 specified? 3. How should we write CustomLicense information if we want it to be required if it exists and not required if it does not exist? 4. How should we handle the packageFileName in SPDX2.3 when we receive an archived file of an OSS package? This topic appears to be discussed in issue#83. (https://github.com/spdx/spdx-3-model/issues/83) Best regards, -- Kobota -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#5270): https://lists.spdx.org/g/Spdx-tech/message/5270 Mute This Topic: https://lists.spdx.org/mt/100484187/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
