spdx / ntia-conformance-checker

Check SPDX SBOM for NTIA minimum elements

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Cut a v1.0.0 Release?

jspeed-meyers opened this issue · comments

I wanted to raise the possibility of cutting a 1.0.0 release.

Observations:

  1. The number of bug reports has dramatically slowed. There's been only a new bug report or two in the last several months. Earlier this spring and summer there were dozens. There are undoubtedly still bugs :) But the software does seem more stable.

  2. The number of downloads via PyPI has increased to over 4,000 per day. Stats here: https://pypistats.org/packages/ntia-conformance-checker.

What's the benefit?

A 1.0.0 release offers a promise of stability. The maintainers, including myself, would then take breaking changes ever more seriously than we already do, ensuring users are not needlessly disrupted by bug fixes or new features. A 1.0.0 release might also provide reassurance to users who are interested in using this software but wary of using it for fear of instability.

This is not a strong opinion, more like an open thought.

cc @goneall

Agree. @jspeed-meyers thanks for collecting the statistics. Looks like we're getting some good usage.