-
Given
```
let GitHub-project =
https://raw.githubusercontent.com/ocharles/dhall-to-cabal/1.3.4.0/dhall/utils/GitHub-project.dhall
let types =
https://raw.githubusercontent.com/ochar…
-
SPDX has the concept of relationships that can be applied to packages, files, or other artifacts. This issue aims to explore what existing metadata can be expressed via SPDX relationships as well as p…
-
Currently setting an input/output SBOM format other than the default requires specifying a flag. However, most of the common specifications seem to have a preferred file extension that we could use to…
-
The Wave service has reported [clients are looking for SBOMs](https://github.com/seqeralabs/wave/issues/489#issuecomment-2097779215) to be provided alongside the generated images.
Since we now use…
-
i.e. satisfies('GFDL-1.1-invariants-or-later', 'MIT OR GPL-1.0') crashes. I've checked both arguments against [spdx-expression-validate](https://github.com/jslicense/spdx-expression-validate.js) and b…
-
Hi `license-expression`. I must begin that this is a great piece of software, and I'm grateful for your contributions.
I noticed a strange edge case when using the spdx license parser. The parser r…
-
## Description of the issue
We want to harmonise the licences used when they are added to the oemetdata. To archive this, we will implement an autoselect function in our metabuilder tool (create/ed…
-
[example6-bin.spdx.txt](https://github.com/user-attachments/files/16139864/example6-bin.spdx.txt)
This file is from [spdx-examples/software/example6/spdx2.2](https://github.com/spdx/spdx-examples/blo…
-
I'm getting a segfault when attempting a basic wav file playback. Are there dependencies that need to be installed on a debian/ubuntu server to support audio processing?
```Oct 11 18:05:35.337536 …
-
## Summary
I wanted to try out this tool and just ran it. It didn't produce any usable output and just threw a cryptic error.
```
INFO[2022-06-09T14:24:20Z] Starting to generate SPDX ... …