Date 1 - 1 of 1
[Question] Relationship and RelathionshipType for a profile
Hello SPDX community,
I have a question on Relationship and RelationshipType also.
Is "RelationshipType" DESCRIBES limited to describing relationships between SPDX documents and software packages?
Here is some background on the question;
Here, if the 3.0 model Relationship follows the v2.3 specification, using DESCRIBES looks to have less impact. However, DESCRIBES is defined to indicate the relationship between an SPDX Document and software packages it covers , and an SPDX Document has only one as itself . In that case, a profile should be configured as its SPDX Document as its own. Also, CONTAINS is better used only for evaluating the relationship between software packages for machine readability, so it is unsuitable for expressing the relationship between a profile and software packages.
If the answer to the question is YES, we should find another way.
Considering to evaluate the relationship between SPDX elements only with "relationshipType" concisely and to indicate the relationship between a profile and software packages clearly, we may introduce a new identifier for a profile and a new "RelationshipType" to show the relationship between a profile and software packages.
The following is just my opinion.
New SPDX identifier field
Profile SPDX identifier field
Any comments are really welcome!
|1 - 1 of 1|