So I know the following is the case:

On 21.08.23 12:05, Alexios Zavras wrote:

Regardless of this, I hope that we all agree that having a value of NOASSERTION as packageVersion means that the SBOM including this does NOT meet NTIA’s minimum requirements.

I do wonder if people will get around this by simply Making Stuff Up.  Not suggesting that as an approach, mind you.

Eliot


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#5312): https://lists.spdx.org/g/Spdx-tech/message/5312
Mute This Topic: https://lists.spdx.org/mt/100823660/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to