spdx/spdx-examples

Stars
123
Rank 290,091 (Top 6 %)
Language
Java
License
GNU General Publi...
Created over 4 years ago
Updated about 1 month ago

spdx/spdx-examples

spdx

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Examples of SPDX files for software combinations

SPDX Usage Examples

This repository includes demonstrations of SPDX for various scenarios and use cases.

The repository is organized by profiles which represents a set of scenarios and use cases for a particular domain (e.g. security, license compliance). Each directory contains a README.md file describing the profile and the examples contained within that directory.

The presentations directory contains examples included in various SPDX presentations.

Please note that this repository does not contain all of the supported fields nor all of the supported serialization formats in the latest version of the spec. Please see the SPDX Specification Examples for the latest and examples that contain all of the supported fields and formats.

Licenses

Copyright Contributors to the spdx-examples project.

Unless otherwise specified, source code in this repository is licensed under the GNU General Public License, Version 3 or later (GPL-3.0-or-later). A copy is included in the COPYING file.

Other licenses may be specified as well for certain files for purposes of illustration or where third-party components are used.

Documentation in this repository is licensed under the Creative Commons Attribution 4.0 International license (CC-BY-4.0), available at https://creativecommons.org/licenses/by/4.0/.

SPDX documents in this repository are provided under CC0 1.0 Universal (CC0-1.0), available at https://creativecommons.org/publicdomain/zero/1.0/.

license-list-data

Various data formats for the SPDX License List including RDFa, HTML, Text, and JSON

license-list-XML

This is the repository for the master files that comprise the SPDX License List

spdx-spec

The SPDX specification in MarkDown and HTML formats.

tools-python

A Python library to parse, validate and create SPDX documents.

spdx-sbom-generator

Support CI generation of SBOMs via golang tooling.

tools

tools-golang

Collection of Go packages to work with SPDX files

spdx-3-model

The model for the information captured in SPDX version 3 standard.

spdx-online-tools

Source for the website providing online SPDX tools

tools-java

SPDX Command Line Tools using the Spdx-Java-Library

spdx-to-osv

Produce an Open Source Vulnerability JSON file based on information in an SPDX document

ntia-conformance-checker

Check SPDX SBOM for NTIA minimum elements

spdx-maven-plugin

Plugin for supporting SPDX in a Maven build.

license-list

SPDX License List - Archived through v2.6

Spdx-Java-Library

Java library which implements the Java object model for SPDX and provides useful helper functions

spdx-license-diff

Chrome/Firefox browser extension to compare text against spdx license list

cdx2spdx

Utility that converts SBOM documents from CycloneDX to SPDX

meetings

This repository stores meetings minutes for the SPDX project

spdx-license-matcher

A tool to match license text with SPDX license list using a an algorithm with finds close matches. It follows SPDX Matching guidelines to keep the substantial text as well as ignore the replaceable text for matching purposes.

sbom-landscape

SPDX SBOM Landscape

governance

SPDX Governance, based on Community Specification model

spdx-gradle-plugin

gordf

LicenseListPublisher

Tool that generates license data found in the license-list-data repository from the license-list-XML source

spdx-build-tool

Support a continuous integration (CI) generation of SPDX files by creating a plugins or extensions to build tools. These plugins or extensions will generate valid SPDX documents based on the build file metadata and source files. https://github.com/spdx/

spdx-tools-js

ATTIC-osit

Open Source Inspect Tool by OSE, Samsung

license-coverage-grader

This is a tool which take an SPDX document and pointer to the original source files, and determine a "grade" score to quantify how complete the licensing information is at the file level for the code represented by the SPDX document.

ATTIC-tools-go

Legacy SPDX Parser Go Language Library - replaced by tools-golang

yalm-python

Implement SPDX License Matching in Python. Project in CommunityBridge Linux Foundation 2020.

spdx-github

SPDX Github Integration Tools

spec-parser

automagically process the specification

tools-ts

outreach

content for outreach activities

ATTIC-airs

Auto IdentifieR using Spdx by OSE, Samsung

schema-to-java

Generates Java classes from the SPDX Schema

spdx-adoption

Keeping list of projects that are using SPDX headers, and those that are able to generate SPDX documents.

license-test-files

Test files which can be used to check license scanners.

change-proposal

Repository for change proposal for the SPDX project

license-test-generator

Tool to generate the license test files (github.com/spdx/license-test-files) from the SPDX listed licenses (github.com/spdx/license-list-data)

spdx-java-jackson-store

JSON storage implementation for the SPDX tools

TEST-LicenseList-XML

This is a copy of the LicenseListXML repository to be used for testing

spdx-java-rdf-store

SPDX Tools RDF Support Library

GSoC

SPDX participation in the Google Summer of Code program

canonical-serialisation

SPDX Canonicalisation repo

package-licenses-mapping

Data mapping license declarations as found in package manifests to a SPDX license expression.

spdx-java-spreadsheet-store

SPDX Java library spreadsheet storage

license-test-scans

Tools to help compare license scans

spec-v3-template

Templates and examples for writing the v3 specification

spdx-java-tagvalue-store

SPDX Document Storage using the Tag/Value format

spdx-model-to-java

Generates Java source files from the SPDX spec version 3+ suitable for inclusion in the SPDX Java Library

tools-list

List of the known available tools in a machine readable format.

license-namespace-test

Test repository for the license namespace

spdx-testbed

spdx-website

This repo contains all the assets used in the spdx.org website

licensegenplugin

Maven plugin for generating the license data from the license list XML repository

DOCS

This is a repository for general documentation related to SPDX

spdx-3-build-profile

spdx-3-serialization-prototype-playground

TEMPORARY repo to contain different draft examples for SPDX 3.0 serializations

licenseRequestImages

License Request Image Repository

license-mgmt

GSoC 2022 project for a web-based license management system

crypto-algorithms

List of cryptographic algorithms and their characteristics

rollup-plugin-spdx

using

Information on how to use the SPDX specification