Greetings all,

 

The SPDX Java Tools have been updated to support the SPDX Spec version 3.0.1.

 

Please give it a try and provide feedback – once I have enough reviews, I’ll 
publish it on tools.spdx.org.

 

For users of the tool / CLI – TL;DR:

*       You can download the 2.0.0-Alpha release on the Github release page 
<https://github.com/spdx/tools-java/releases/tag/v2.0.0-Alpha>  or Maven 
Central <https://central.sonatype.com/search?q=org.spdx%3Atools-java> .
*       Commands and syntax are documented in the GitHub README file 
<https://github.com/spdx/tools-java/blob/master/README.md> 
*       JSON-LD is the format designation for SPDX 3.X files
*       You can convert from any SPDX 2.X formats (e.g. tag/value, JSON, RDF, 
Spreadsheet) to the JSON-LD format – but you can not convert from JSON-LD to 
any of the SPDX 2.X formats
*       Please provide any issues, feedback, suggestion at 
https://github.com/spdx/tools-java/issues/new/choose

 

For developers using the libraries – TL;DR:

*       The SPDX Java Library version 2.0.0-Alpha includes a few new 
dependencies which are in the SPDX GitHub repos (details below)
*       The serialization format (JSON-LD) is implemented in the 
spdx-java-v3jsonld-store <https://github.com/spdx/spdx-java-v3jsonld-store>  
(also available from Maven Central)
*       To support both SPDX 2.X and 3.X formats required some significant 
breaking changes – see the upgrade documentation 
<https://github.com/spdx/Spdx-Java-Library/blob/master/README-V3-UPGRADE.md>  
for some help on upgrading from previous versions
*       If you’re new to the library, check out the getting started section 
<https://github.com/spdx/Spdx-Java-Library/blob/master/README.md#getting-started>
  of the README file
*       Please provide feedback in the appropriate GitHub repo (e.g. the SPDX 
Java Library issues <https://github.com/spdx/Spdx-Java-Library/issues> )
*       The warnings are a bit chatty – if this gets annoying, set your logging 
level to ERROR

 

Details:

 

Supporting the SPDX 3.X model AND the SPDX 2.X model in the same library 
required some significant (breaking) changes.

 

Although there has been some testing, the code would be considered “Alpha 
quality” – hence the request for testing and feedback 😉.

 

To allow for reduced dependencies for simpler use cases, the code is structured 
into several libraries stored in different repositories.  Depending on your 
needs, you can include some or all of the libraries.

 

The tools-java <https://github.com/spdx/tools-java>  library will include all 
other libraries as dependencies – so if you don’t mind a large set of 
dependencies, this can be a convenient way of including everything you may 
need.  The tools-java also includes the CLI.

 

Each of the different serialization formats are supported in separate libraries 
(e.g. spdx-java-spreadsheet-store, spdx-java-tagvalue-store, …).

 

Starting with the 2.0.0 version of the library, the major versions of the 
library are separated into different libraries (details below).

 

The SPDX 3.0 model files are generated from the specification SHACL file.

 

Following are new libraries and repos added to the GitHub SPDX organization to 
support the SPDX 3.0.1 spec:

 

*       spdx-java-core <https://github.com/spdx/spdx-java-core>  – common code 
used across all versions of SPDX
*       spdx-java-model-2_X <https://github.com/spdx/spdx-java-model-2_X>  – 
SPDX 2.X model files
*       spdx-java-v3jsonld-store 
<https://github.com/spdx/spdx-java-v3jsonld-store>  – Code which serializes / 
deserialized the SPDX spec version 3 compliant JSON-LD files
*       spdx-model-to-java <https://github.com/spdx/spdx-model-to-java>  – Code 
generator for Java source files from the SPDX 3 model Shacl file
*       spdx-java-model-3_0 <https://github.com/spdx/spdx-java-model-3_0>  – 
Repository containing the generated code for the SPDX 3 model

 

The following files were updated to support the SPDX spec version 3.0:

*       Spdx-Java-Library <https://github.com/spdx/spdx-java-library>  – 
v2.0.0-Alpha
*       spdx-java-rdf-store <https://github.com/spdx/spdx-java-rdf-store>  – 
v2.0.0-Alpha
*       spdx-java-spreadsheet-store 
<https://github.com/spdx/spdx-java-spreadsheet-store>  – v2.0.0-Alpha
*       spdx-java-tagvalue-store 
<https://github.com/spdx/spdx-java-tagvalue-store>  – v2.0.0-Alpha
*       spdx-java-jackson-store 
<https://github.com/spdx/spdx-java-jackson-store>  – v2.0.0-Alpha
*       tools-java <https://github.com/spdx/tools-java>  – v2.0.0-Alpha

 

 

Let me know if you have any questions.

 

Best regards,

Gary

 



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#5723): https://lists.spdx.org/g/Spdx-tech/message/5723
Mute This Topic: https://lists.spdx.org/mt/108298461/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to