Licensing
summary
SPDX 3.0 keeps most of 2.3 but makes three concrete changes: it adds license additions so WITH can point to custom-defined clauses, it splits licensing into simple (single expression string) and expanded (parsed components) models for different processing needs, and it converts declared/concluded licenses from element properties into relationships so SBOM elements remain immutable while allowing later conclusions to be attached. Open issues and examples are tracked in the spec.
AI-written summary · about
related talks
16mranslate FOSS licenses into code
07mTooling and Sharing Traceability Discussion
31mSoftware Bill of Materials (SBoM) for dummies
27mClearlyDefined: A Crowdsourced Database of Licensing Metadata
48mThe State of OpenAPI Specification: what's new in 3.1
23mPaying it Forward: Documenting your Open Hardware Module
24mSpeculative Development
14mExploring possibilities for integrating StrictDoc with ELISA's requirements temp...