spdx / tools-python

A Python library to parse, validate and create SPDX documents.

http://spdx.org

spdx/tools-python Issues

SPDX-tools
Updated 14 days ago
SPDX3 validation failing on CreationInfo
Updated 18 days ago2
Question regarding license_expression_parser behavior
Updated 18 days ago2
Incorrect cpe23Type validation?
Updated a month ago3
Remove unused semantic_version module
Updated 2 months ago1
Unhashable type SpdxNoAssertion
Updated 2 months ago
Why use uritools instead of the standard library urllib?
Updated 2 months ago1
The LicenseRef prefix should not be required for standard licenses
Updated 3 months ago
Ugly error message when the JSON syntax is not correct
Closed 3 months ago1
Valid SPDX cannot be converted from JSON to tag:value
Closed 4 months ago1
Ugly error for nonexisting file
Closed 4 months ago1
Failed to convert spdx to xml with Annotation
Closed 4 months ago1
Error while calling SPDX parse_file() API inside thread function
Updated 4 months ago
Relationship with Package Section
Closed 5 months ago2
`create_list_without_duplicates` Function Can be Sped Up By Using Set
Updated 5 months ago
Would like an option to omit files from graph
Updated 6 months ago
F
Closed 6 months ago
Slow for SBOMs with a large number of files + relationships
Updated 6 months ago1
Converting valid JSON SPDX file to tag:value gives invalid SPDX
Updated 6 months ago
would like to package - but the name is unsuitable
Updated 6 months ago1
Request for Handling Custom Licenses in Document and Package Validators
Closed 7 months ago6
Adding NOASSERTION/NONE to DocumentRef in relationships as per the spdx v2.3 spec
Updated 7 months ago3
Question of generation SBOM
Closed 7 months ago3
Be more lenient when parsing "true" and "false" in tag-value
Updated 7 months ago
Exception not catched with LicenseRef- containing slash
Closed 8 months ago2
Change order of properties when converting to json-dict
Closed 8 months ago3
Consider renaming tools-python to spdx-tools-python
Updated 9 months ago1
spdx_tools created field does not matches the specification
Closed 9 months ago1
Complexity in validate SPDX ID causing slowdown
Closed 10 months ago7
Write documentation on architecture of the project
Closed 10 months ago
Library Usage: Use of custom Licenses
Closed 10 months ago4
List of possible errors returned from validation script
Closed 10 months ago4
IndexError on parsing failure
Closed 10 months ago1
Encoding in `parse_file` method
Closed 10 months ago7
Unable to parse https://git.causal.agency/libretls/ as downloadLocation
Closed 10 months ago2
Tool is failing to parse URL like git@github.com:siimon/prom-client.git in downloadLocation
Closed 10 months ago1
Tags and format properties are case sensitive
Closed 10 months ago5
Conversion from JSON tag:value gives invalid SPDX
Closed 10 months ago3
External License reference is rejected by the validator
Closed a year ago1
Doubt regarding SPDX None value
Closed a year ago3
Error validating download location with git+ssh URI
Closed a year ago1
New flake8 version raises new linting errors
Closed a year ago1
make "Package CONTAINS Package" valid even when `files_analyzed == False`
Closed a year ago
Add back package verification code calculation
Closed a year ago
Is this organization name really invalid?
Closed a year ago11
Auto-generate API docs
Closed a year ago
Prepare 0.8 RC
Closed a year ago1
Incorrect timestamp format in generated documents
Closed a year ago2
Update SPDX3 model to latest spec
Updated a year ago
Auto-generate the SPDX3 model from the official specification
Updated a year ago