search

oasis-tcs / csaf

OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secondary artifacts like meeting minutes and productivity code
https://github.com/oasis-tcs/csaf
Other
151 stars 40 forks source link

CPE #800

Closed tschmidtb51 closed 1 month ago

tschmidtb51 commented 1 month ago

@sthagen: Do you think that this is the appropriate form?

sthagen commented 1 month ago

Given the fuzziness of CPE matching an inventory I am not sure we do need a normative support statement about the version range of our CPE support. If we need that to me the question is how one can test if we do in fact support all corner cases of these two upstream CPE versions. Maybe some practitioners can speak up? Don't we even have CPE authors on our TC as members?

tschmidtb51 commented 1 month ago

I don't think we need a mandatory statement - the informative should be sufficient.