Technical Team/Use Cases/2.0/Decorating an already produces and signed SPDX dataset with extension data
From SPDX Wiki
< Technical Team | Use Cases/2.0
Stakeholders and interests
The person or organization that is wishes to extend and existing already signed SPDX data with non-standard information.
Standard SPDX Consumer
A person, organization or tool that can read and process standard SPDX data but is not aware of the non-standard extensions being used by "SPDX producer".
Extended SPDX Consumer
A person, organization or tool that can read and process the non-standard extensions used by "SPDX producer" as well as standard SPDX data.
Main success scenario
- SPDX decorator provides extension data for the existing signed SPDX data
- An extended SPDX consumer downloads the SPDX file and can consume its extension data
- A standard SPDX consumer downloads the SPDX file and uses the standard data as input into their compliance processes