spdx / spdx-java-tagvalue-store

SPDX Document Storage using the Tag/Value format
Apache License 2.0
2 stars 1 forks source link

Multiple values for PackageSupplier not flagged as invalid #64

Open vargenau opened 3 weeks ago

vargenau commented 3 weeks ago

example6-lib.spdx.txt

PackageSupplier: Person: Michael Hudson-Doyle
PackageSupplier: Organization: Canonical Ltd.

python tools flags it as invalid:

pyspdxtools -i example6-lib.spdx
ERROR:root:There have been issues while parsing the provided document:
Error while parsing Package: ['Multiple values for PackageSupplier found. Line: 16']

java tools do not:

This SPDX Document is valid.
goneall commented 3 weeks ago

It looks like this issue is specific to the tag/value serialization format. Moving this over to the tag/value repo.