THE SPDX WIKI IS NO LONGER ACTIVE. ALL CONTENT HAS BEEN MOVED TO https://github.com/spdx

Difference between revisions of "Technical Team/Minutes/2013-02-19"

From SPDX Wiki
Jump to: navigation, search
 
Line 1: Line 1:
<p><span style="font-family: Calibri; font-size: medium;">Minutes 2/19/2013</span></p><p><span style="font-family: Calibri; font-size: medium;">Attendees:</span></p><ul><li><span style="font-size: medium;">&nbsp;</span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Gary O’Neall</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Marshall Clow</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Bill Schineller</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Kate Stewart</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Matt Germonprez</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Liang Cao</span></li></ul><p><span style="font-family: Calibri; font-size: medium;">Agenda:</span></p><ul><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Model Discussion</span></li><li>&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Updates</span></li></ul><p><span style="font-family: Calibri; font-size: medium;">Modeling:</span></p><ul><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Reviewed proposed model</span><ul><li>&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">rename the top level SPDXFile to SPDXDoc (duplicate class name in the model)</span></li><li>&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Discussed the relationship betw SPDXPackage and SPDXFile (the subclass)</span></span><ul><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">must have this; SPDX 1.1 implied containment relationship&nbsp;</span></span></li><li>&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Discussed examples of SPDXElementRelationship</span></span><ul><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">'compiledFrom' another SPDXElement....</span></span></li><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">'patchTo' another SPDXElement....</span></span></li><li>&nbsp;&nbsp;<span style="font-size: medium;"><span style="font-family: Calibri;">&nbsp;'isContainedIn' &nbsp;(SPDXPackage contains Files)</span></span></li><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">'isSameAs' &nbsp;(exact same SHA contained in different packages)</span></span></li><li>&nbsp;&nbsp; <span style="font-size: medium;"><span style="font-family: Calibri;">SPDXDoc to SPDXDoc relationship ?&nbsp; How to uniquely refer to the SPDXDocument containing an SPDXElement we want to reference?</span></span><ul><li>&nbsp; <span style="font-family: Calibri; font-size: medium;">Probably need to add SPDXDocument reference in the relationship object</span></li></ul></li><li>&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Discussed definition of Specifier.&nbsp; </span></span><ul><li>&nbsp; <span style="font-family: Calibri; font-size: medium;">Same as Ed’s proposal – can be a URI</span></li><li>&nbsp; <span style="font-family: Calibri; font-size: medium;">any SPDXElement has a Specifier, which is a way that others can refer to 'me' ?</span></li></ul></li><li>&nbsp;&nbsp; <span style="font-size: medium;"><span style="font-family: Calibri;">Usage: add a property to SPDXElement.&nbsp; Enumeration of e.g.</span></span><ul><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Tool, not shipped</span></span></li><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Optional element (like contrib module)</span></span></li><li>&nbsp; <span style="font-size: medium;"><span style="font-family: Calibri;">Dynamically linked (e.g. a replaceable library like a jar file or DLL)</span></span></li></ul></li></ul></li></ul></li></ul></li></ul><p><span style="font-family: Calibri; font-size: medium;">&nbsp;</span></p><p><span style="font-family: Calibri; font-size: medium;">Update from Matt and Liang </span></p><ul><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">New demo version available on Github:&nbsp; </span></span><a href="https://github.com/spdx-tools"><span style="color: #0000ff; font-family: Calibri; font-size: medium;">https://github.com/spdx-tools</span></a></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Package level release in early March</span></li><li><span style="font-size: medium;">&nbsp;</span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">File level editing to follow</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Dashboard and compare utilities will follow</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">SPDX Tools Compare utility was reviewed and a few differences found.&nbsp; Matt will email the spreadsheet results of the comparison.</span></li></ul>
+
<p><span style="font-family: Calibri; font-size: medium;">Minutes 2/19/2013</span></p><p><span style="font-family: Calibri; font-size: medium;">Attendees:</span></p><ul><li><span style="font-size: medium;">&nbsp;</span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Gary O’Neall</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Marshall Clow</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Bill Schineller</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Kate Stewart</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Matt Germonprez</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Liang Cao</span></li></ul><p><span style="font-family: Calibri; font-size: medium;">Agenda:</span></p><ul><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Model Discussion</span></li><li>&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Updates</span></li></ul><p><span style="font-family: Calibri; font-size: medium;">Modeling:</span></p><ul><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Reviewed proposed model</span><ul><li>&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">rename the top level SPDXFile to SPDXDoc (duplicate class name in the model)</span></li><li>&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Discussed the relationship betw SPDXPackage and SPDXFile (the subclass)</span></span><ul><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">must have this; SPDX 1.1 implied containment relationship&nbsp;</span></span></li><li>&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Discussed examples of SPDXElementRelationship</span></span><ul><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">'compiledFrom' another SPDXElement....</span></span></li><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">'patchTo' another SPDXElement....</span></span></li><li>&nbsp;&nbsp;<span style="font-size: medium;"><span style="font-family: Calibri;">&nbsp;'isContainedIn' &nbsp;(SPDXPackage contains Files)</span></span></li><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">'isSameAs' &nbsp;(exact same SHA contained in different packages)</span></span></li></ul></li><li>&nbsp; &nbsp;<span style="font-size: medium;"><span style="font-family: Calibri;">SPDXDoc to SPDXDoc relationship ?&nbsp; How to uniquely refer to the SPDXDocument containing an SPDXElement we want to reference?</span></span><ul><li>&nbsp; <span style="font-family: Calibri; font-size: medium;">Probably need to add SPDXDocument reference in the relationship object</span></li></ul></li><li>&nbsp; &nbsp;<span style="font-family: Calibri;"><span style="font-size: medium;">Discussed definition of Specifier.&nbsp; </span></span><ul><li>&nbsp; <span style="font-family: Calibri; font-size: medium;">Same as Ed’s proposal – can be a URI</span></li><li>&nbsp; <span style="font-family: Calibri; font-size: medium;">any SPDXElement has a Specifier, which is a way that others can refer to 'me' ?</span></li></ul></li><li>&nbsp; &nbsp;<span style="font-size: medium;"><span style="font-family: Calibri;">Usage: add a property to SPDXElement.&nbsp; Enumeration of e.g.</span></span><ul><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Tool, not shipped</span></span></li><li>&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">Optional element (like contrib module)</span></span></li><li>&nbsp; <span style="font-size: medium;"><span style="font-family: Calibri;">Dynamically linked (e.g. a replaceable library like a jar file or DLL)</span></span></li></ul></li></ul></li></ul></li></ul><p><span style="font-family: Calibri; font-size: medium;">&nbsp;</span></p><p><span style="font-family: Calibri; font-size: medium;">Update from Matt and Liang </span></p><ul><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri;"><span style="font-size: medium;">New demo version available on Github:&nbsp; </span></span><a href="https://github.com/spdx-tools"><span style="color: #0000ff; font-family: Calibri; font-size: medium;">https://github.com/spdx-tools</span></a></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Package level release in early March</span></li><li><span style="font-size: medium;">&nbsp;</span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">File level editing to follow</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">Dashboard and compare utilities will follow</span></li><li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <span style="font-family: Calibri; font-size: medium;">SPDX Tools Compare utility was reviewed and a few differences found.&nbsp; Matt will email the spreadsheet results of the comparison.</span></li></ul>

Revision as of 17:48, 27 February 2013

Minutes 2/19/2013

Attendees:

  •          Gary O’Neall
  •          Marshall Clow
  •          Bill Schineller
  •          Kate Stewart
  •          Matt Germonprez
  •          Liang Cao

Agenda:

  •          Model Discussion
  •          Updates

Modeling:

  •          Reviewed proposed model
    •    rename the top level SPDXFile to SPDXDoc (duplicate class name in the model)
    •    Discussed the relationship betw SPDXPackage and SPDXFile (the subclass)
      •   must have this; SPDX 1.1 implied containment relationship 
      •    Discussed examples of SPDXElementRelationship
        •   'compiledFrom' another SPDXElement....
        •   'patchTo' another SPDXElement....
        •    'isContainedIn'  (SPDXPackage contains Files)
        •   'isSameAs'  (exact same SHA contained in different packages)
      •    SPDXDoc to SPDXDoc relationship ?  How to uniquely refer to the SPDXDocument containing an SPDXElement we want to reference?
        •   Probably need to add SPDXDocument reference in the relationship object
      •    Discussed definition of Specifier. 
        •   Same as Ed’s proposal – can be a URI
        •   any SPDXElement has a Specifier, which is a way that others can refer to 'me' ?
      •    Usage: add a property to SPDXElement.  Enumeration of e.g.
        •   Tool, not shipped
        •   Optional element (like contrib module)
        •   Dynamically linked (e.g. a replaceable library like a jar file or DLL)

 

Update from Matt and Liang

  •          New demo version available on Github:  <a href="https://github.com/spdx-tools">https://github.com/spdx-tools</a>
  •          Package level release in early March
  •          File level editing to follow
  •          Dashboard and compare utilities will follow
  •          SPDX Tools Compare utility was reviewed and a few differences found.  Matt will email the spreadsheet results of the comparison.