Good stuff!

 

We will start integration testing beginning next week.

 

Thanks for your efforts!

 

Regards,

Karsten

 

From: <[email protected]> on behalf of Gary O'Neall 
<[email protected]>
Organization: Source Auditor Inc.
Date: Friday, September 6, 2024 at 04:55
To: <[email protected]>
Subject: [spdx-tech] SPDX Java Tools supporting SPDX Spec Version 3 available 
for evaluation / testing
Resent-From: <[email protected]>
Resent-Date: Thu, 05 Sep 2024 19:55:20 -0700

 

Greetings all,

 

The SPDX Java Tools have been updated to support the SPDX Spec version 3.0.1.

 

Please give it a try and provide feedback – once I have enough reviews, I’ll 
publish it on tools.spdx.org.

 

For users of the tool / CLI – TL;DR:
You can download the 2.0.0-Alpha release on the Github release page or Maven 
Central.
Commands and syntax are documented in the GitHub README file
JSON-LD is the format designation for SPDX 3.X files
You can convert from any SPDX 2.X formats (e.g. tag/value, JSON, RDF, 
Spreadsheet) to the JSON-LD format – but you can not convert from JSON-LD to 
any of the SPDX 2.X formats
Please provide any issues, feedback, suggestion at 
https://github.com/spdx/tools-java/issues/new/choose
 

For developers using the libraries – TL;DR:
The SPDX Java Library version 2.0.0-Alpha includes a few new dependencies which 
are in the SPDX GitHub repos (details below)
The serialization format (JSON-LD) is implemented in the 
spdx-java-v3jsonld-store (also available from Maven Central)
To support both SPDX 2.X and 3.X formats required some significant breaking 
changes – see the upgrade documentation for some help on upgrading from 
previous versions
If you’re new to the library, check out the getting started section of the 
README file
Please provide feedback in the appropriate GitHub repo (e.g. the SPDX Java 
Library issues)
The warnings are a bit chatty – if this gets annoying, set your logging level 
to ERROR
 

Details:

 

Supporting the SPDX 3.X model AND the SPDX 2.X model in the same library 
required some significant (breaking) changes.

 

Although there has been some testing, the code would be considered “Alpha 
quality” – hence the request for testing and feedback 😉.

 

To allow for reduced dependencies for simpler use cases, the code is structured 
into several libraries stored in different repositories.  Depending on your 
needs, you can include some or all of the libraries.

 

The tools-java library will include all other libraries as dependencies – so if 
you don’t mind a large set of dependencies, this can be a convenient way of 
including everything you may need.  The tools-java also includes the CLI.

 

Each of the different serialization formats are supported in separate libraries 
(e.g. spdx-java-spreadsheet-store, spdx-java-tagvalue-store, …).

 

Starting with the 2.0.0 version of the library, the major versions of the 
library are separated into different libraries (details below).

 

The SPDX 3.0 model files are generated from the specification SHACL file.

 

Following are new libraries and repos added to the GitHub SPDX organization to 
support the SPDX 3.0.1 spec:

 
spdx-java-core – common code used across all versions of SPDX
spdx-java-model-2_X – SPDX 2.X model files
spdx-java-v3jsonld-store – Code which serializes / deserialized the SPDX spec 
version 3 compliant JSON-LD files
spdx-model-to-java – Code generator for Java source files from the SPDX 3 model 
Shacl file
spdx-java-model-3_0 – Repository containing the generated code for the SPDX 3 
model
 

The following files were updated to support the SPDX spec version 3.0:
Spdx-Java-Library – v2.0.0-Alpha
spdx-java-rdf-store – v2.0.0-Alpha
spdx-java-spreadsheet-store – v2.0.0-Alpha
spdx-java-tagvalue-store – v2.0.0-Alpha
spdx-java-jackson-store – v2.0.0-Alpha
tools-java – v2.0.0-Alpha
 

 

Let me know if you have any questions.

 

Best regards,

Gary

 





-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#5724): https://lists.spdx.org/g/Spdx-tech/message/5724
Mute This Topic: https://lists.spdx.org/mt/108298461/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to