Comments (2)
This solution assumes that multiple inheritance is allowed: Package is defined in the Software profile but the Build profile can add properties to it.
An alternate solution would allow only single inheritance: the Build profile defines a BuildPackage type that contains just properties relevant to Build, including a required "sourcePackage" property that points to the original supplier package. That eliminates 1) multiple inheritance, 2) an extra AMENDS relationship element, and 3) duplicate properties in both original and build elements.
from spdx-3-model.
#249 resolves this. Closing. Please open a new issue if you spot additional concerns.
from spdx-3-model.
Related Issues (20)
- SBOM generator for SPDX 3.0 HOT 1
- Security Examples need to be updated HOT 3
- `hasDataFile` would benefit from a better description HOT 4
- Introduce the fields for referring harm HOT 2
- Cardinality constraints on external properties of AIPackage and DatasetPackage should be used consistently HOT 2
- Clarify description between ExternalIdentifier and ExternalReference HOT 4
- AI: meaning of PresenceType in autonomyType HOT 5
- In page https://spdx.github.io/spdx-spec/v3.0/model/Licensing/Licensing/ the lists are not displayed correctly. HOT 3
- Doc: Possible outdated references to gh-pages and auto-generated in README.md HOT 2
- Delete gh-pages for the spdx-3-model
- License list version is still not SemVer HOT 5
- Does the specVersion include a PATCH version?
- ProfileIdentifierType list HOT 1
- What does "IRI ``" mean? HOT 6
- Have Markdown lint runs after commit HOT 1
- 3.1: Dataset: Add a "language" field
- rootElement: SBOM or BOM? HOT 1
- Where are the SPDX Matching Guidelines? HOT 7
- Where is the "Legacy Text Template format section"? HOT 3
- Vocabulary entries should be single-line
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spdx-3-model.