spdx / ntia-conformance-checker

Check SPDX SBOM for NTIA minimum elements
Apache License 2.0
52 stars 19 forks source link

Cut a v1.0.0 Release? #161

Closed jspeed-meyers closed 10 months ago

jspeed-meyers commented 10 months ago

I wanted to raise the possibility of cutting a 1.0.0 release.

Observations:

  1. The number of bug reports has dramatically slowed. There's been only a new bug report or two in the last several months. Earlier this spring and summer there were dozens. There are undoubtedly still bugs :) But the software does seem more stable.

  2. The number of downloads via PyPI has increased to over 4,000 per day. Stats here: https://pypistats.org/packages/ntia-conformance-checker.

What's the benefit?

A 1.0.0 release offers a promise of stability. The maintainers, including myself, would then take breaking changes ever more seriously than we already do, ensuring users are not needlessly disrupted by bug fixes or new features. A 1.0.0 release might also provide reassurance to users who are interested in using this software but wary of using it for fear of instability.

This is not a strong opinion, more like an open thought.

cc @goneall

goneall commented 10 months ago

Agree. @jspeed-meyers thanks for collecting the statistics. Looks like we're getting some good usage.