https://wiki.spdx.org/index.php?action=history&feed=atom&title=Technical_Team%2FMinutes%2F2015-07-21 2026-05-07T12:25:42Z Revision history for this page on the wiki MediaWiki 1.23.13 https://wiki.spdx.org/index.php?title=Technical_Team/Minutes/2015-07-21&diff=3635&oldid=prev 2015-07-21T18:10:27Z

<p>Created page with &quot;July 21, 2015 == Attendees == * Gary O&#039;Neall * Kate Stewart * Hassib Khanafer * Bill Schineller * Scott Sterling * Yev Bronshteyn * Mark Gisi ==Package External Identifiers==...&quot;</p> <p><b>New page</b></p><div>July 21, 2015<br /> == Attendees ==<br /> * Gary O'Neall<br /> * Kate Stewart<br /> * Hassib Khanafer<br /> * Bill Schineller<br /> * Scott Sterling<br /> * Yev Bronshteyn<br /> * Mark Gisi<br /> ==Package External Identifiers==<br /> * Motivation: allows easy reference to other package metadata by referring to other identifiers<br /> * Added CPE - Vulnerability information from NIST<br /> * Proposal Google docs at: https://docs.google.com/document/d/1j6LWnkh5GbMV9Xo5_zJ0wTNLROEIa4o1OU279YueI90/edit<br /> * Should this be a field at a file level as well?<br /> ** Could be handled as a package relationship from the file and have the file contain the external identifier<br /> ** Would be simpler to have the field at the file level<br /> ** Discussion on the relationship between package external identifiers, artifactOf, and external packages<br /> ** Agreed that we would have this be a package level definition for now - a file level external identifier would make sense, but would be a separate proposal<br /> * Discussion on whether we include CPE or include that in a separate?<br /> ** Table the discussion until after the security proposal<br /> ** There may be a separate security section<br /> * Should it be package identifier or something more generic (e.g. external identifier)?<br /> * Should it only refer to source code locations or should it be more general?<br /> ** Agree to have general references (need to take into account security which will be discussed after the security proposal)<br /> * Should we replace the &quot;/&quot; with something more distinct (e.g. double colon &quot;::&quot;)<br /> * Relationship to other fields need to be defined<br /> ** download location - Example where both download location and external ID<br /> ** home page<br /> * Bill will update the proposal based on today's discussion<br /> [[Category:Technical|Minutes]]<br /> [[Category:Minutes]]</div>

Goneall