THE SPDX WIKI IS NO LONGER ACTIVE. ALL CONTENT HAS BEEN MOVED TO https://github.com/spdx
Technical Team/Use Cases/2.0/Decorating an already produces and signed SPDX dataset with extension data
From SPDX Wiki
Contents
[hide]Stakeholders and interests
SPDX Decorator
The person or organization that is wishes to extend and existing already signed SPDX data with non-standard information.
Standard SPDX Consumer
A person, organization or tool that can read and process standard SPDX data but is not aware of the non-standard extensions being used by "SPDX producer".
Extended SPDX Consumer
A person, organization or tool that can read and process the non-standard extensions used by "SPDX producer" as well as standard SPDX data.
Main success scenario
- SPDX decorator provides extension data for the existing signed SPDX data
- An extended SPDX consumer downloads the SPDX file and can consume its extension data
- A standard SPDX consumer downloads the SPDX file and uses the standard data as input into their compliance processes