ISO/IEC DIS 5962

Information Technology -- SPDX® Specification V2.2.1

Titre manque

Standards Content (sample)

DRAFT INTERNATIONAL STANDARD
ISO/IEC DIS 5962
ISO/IEC JTC 1 Secretariat: ANSI
Voting begins on: Voting terminates on:
2020-12-08 2021-03-02
Information Technology — SPDX® Specification V2.2.1
ICS: 35.080
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
This document is circulated as received from the committee secretariat.
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/IEC DIS 5962:2020(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
PROVIDE SUPPORTING DOCUMENTATION. ISO/IEC 2020
---------------------- Page: 1 ----------------------
ISO #####-#:####(X)
ISO/IEC DIS 5962:2020(E)
Contents

Foreword.............................................................................................................................................................xiii

Introduction....................................................................................................................................................... xiv

1 Scope.................................................................................................................................................................1

2 Normative references.................................................................................................................................1

3 Terms and definitions ................................................................................................................................2

4 Conformance..................................................................................................................................................3

4.1 SPDX Versions ...............................................................................................................................................3

4.2 Obsolete features .........................................................................................................................................3

4.3 Alternate notation for some requirements ........................................................................................3

4.4 Standard data format requirements.....................................................................................................4

4.5 Usage.................................................................................................................................................................5

4.6 The SPDX Lite profile..................................................................................................................................5

5 Composition of an SPDX document .......................................................................................................5

5.1 What this specification covers ................................................................................................................5

5.2 Sections............................................................................................................................................................6

5.2.1 SPDX document creation information section............................................................................6

5.2.2 Package information section.............................................................................................................6

5.2.3 File information section ......................................................................................................................7

5.2.4 Snippet information section ..............................................................................................................8

5.2.5 Other licensing information detected ............................................................................................8

5.2.6 Relationships between SPDX elements information section.................................................9

5.2.7 Annotations information section.....................................................................................................9

5.2.8 Review information section...............................................................................................................9

5.3 What this specification does not cover ................................................................................................9

6 Document creation information fields.............................................................................................. 10

6.1 SPDX version field..................................................................................................................................... 10

6.1.1 Description............................................................................................................................................ 10

6.1.2 Intent....................................................................................................................................................... 10

6.1.3 Examples................................................................................................................................................ 10

6.2 Data license field....................................................................................................................................... 11

6.2.1 Description............................................................................................................................................ 11

6.2.2 Intent....................................................................................................................................................... 11

6.2.3 Examples................................................................................................................................................ 11

6.3 SPDX identifier field................................................................................................................................. 11

6.3.1 Description............................................................................................................................................ 11

6.3.2 Intent....................................................................................................................................................... 12

6.3.3 Examples................................................................................................................................................ 12

6.4 Document name field............................................................................................................................... 12

6.4.1 Description............................................................................................................................................ 12

COPYRIGHT PROTECTED DOCUMENT

6.4.2 Intent....................................................................................................................................................... 12

© ISO/IEC 2020

6.4.3 Examples................................................................................................................................................ 13

All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may

6.5 SPDX document namespace field ........................................................................................................ 13

be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting

6.5.1 Description............................................................................................................................................ 13

on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address

below or ISO’s member body in the country of the requester.

6.5.2 Intent....................................................................................................................................................... 14

ISO copyright office

6.5.3 Examples................................................................................................................................................ 14

CP 401 • Ch. de Blandonnet 8

6.6 External document references field................................................................................................... 15

CH-1214 Vernier, Geneva

6.6.1 Description............................................................................................................................................ 15

Phone: [phone]

Fax: [phone] Intent....................................................................................................................................................... 15

Email: [e-mail]
Website: www.iso.org
Published in Switzerland
© ISO #### – All rights reserved iii
ii © ISO/IEC 2020 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/IEC DIS 5962:2020(E)
ISO #####-#:####(X)
Contents

Foreword ............................................................................................................................................................. xiii

Introduction ....................................................................................................................................................... xiv

1 Scope ................................................................................................................................................................. 1

2 Normative references ................................................................................................................................. 1

3 Terms and definitions ................................................................................................................................ 2

4 Conformance .................................................................................................................................................. 3

4.1 SPDX Versions ............................................................................................................................................... 3

4.2 Obsolete features ......................................................................................................................................... 3

4.3 Alternate notation for some requirements ........................................................................................ 3

4.4 Standard data format requirements ..................................................................................................... 4

4.5 Usage................................................................................................................................................................. 5

4.6 The SPDX Lite profile .................................................................................................................................. 5

5 Composition of an SPDX document ....................................................................................................... 5

5.1 What this specification covers ................................................................................................................ 5

5.2 Sections ............................................................................................................................................................ 6

5.2.1 SPDX document creation information section ............................................................................ 6

5.2.2 Package information section ............................................................................................................. 6

5.2.3 File information section ...................................................................................................................... 7

5.2.4 Snippet information section .............................................................................................................. 8

5.2.5 Other licensing information detected ............................................................................................ 8

5.2.6 Relationships between SPDX elements information section ................................................. 9

5.2.7 Annotations information section ..................................................................................................... 9

5.2.8 Review information section ............................................................................................................... 9

5.3 What this specification does not cover ................................................................................................ 9

6 Document creation information fields .............................................................................................. 10

6.1 SPDX version field ..................................................................................................................................... 10

6.1.1 Description ............................................................................................................................................ 10

6.1.2 Intent ....................................................................................................................................................... 10

6.1.3 Examples ................................................................................................................................................ 10

6.2 Data license field ....................................................................................................................................... 11

6.2.1 Description ............................................................................................................................................ 11

6.2.2 Intent ....................................................................................................................................................... 11

6.2.3 Examples ................................................................................................................................................ 11

6.3 SPDX identifier field ................................................................................................................................. 11

6.3.1 Description ............................................................................................................................................ 11

6.3.2 Intent ....................................................................................................................................................... 12

6.3.3 Examples ................................................................................................................................................ 12

6.4 Document name field ............................................................................................................................... 12

6.4.1 Description ............................................................................................................................................ 12

6.4.2 Intent ....................................................................................................................................................... 12

6.4.3 Examples ................................................................................................................................................ 13

6.5 SPDX document namespace field ........................................................................................................ 13

6.5.1 Description ............................................................................................................................................ 13

6.5.2 Intent ....................................................................................................................................................... 14

6.5.3 Examples ................................................................................................................................................ 14

6.6 External document references field ................................................................................................... 15

6.6.1 Description ............................................................................................................................................ 15

6.6.2 Intent ....................................................................................................................................................... 15

© ISO #### – All rights reserved iii
© ISO/IEC 2020 – All rights reserved
---------------------- Page: 3 ----------------------
ISO/IEC DIS 5962:2020(E)
ISO #####-#:####(X)

6.6.3 Examples ................................................................................................................................................15

6.7 License list version field .........................................................................................................................16

6.7.1 Description ............................................................................................................................................16

6.7.2 Intent .......................................................................................................................................................16

6.7.3 Examples ................................................................................................................................................16

6.8 Creator field .................................................................................................................................................17

6.8.1 Description ............................................................................................................................................17

6.8.2 Intent .......................................................................................................................................................17

6.8.3 Examples ................................................................................................................................................17

6.9 Created field ................................................................................................................................................17

6.9.1 Description ............................................................................................................................................17

6.9.2 Intent .......................................................................................................................................................18

6.9.3 Examples ................................................................................................................................................18

6.10 Creator comment field.......................................................................................................................19

6.10.1 Description ............................................................................................................................................19

6.10.2 Intent .......................................................................................................................................................19

6.10.3 Examples ................................................................................................................................................19

6.11 Document comment field .................................................................................................................19

6.11.1 Description ............................................................................................................................................19

6.11.2 Intent .......................................................................................................................................................20

6.11.3 Examples ................................................................................................................................................20

7 Package information fields ....................................................................................................................20

7.1 Package name field ...................................................................................................................................20

7.1.1 Description ............................................................................................................................................20

7.1.2 Intent .......................................................................................................................................................21

7.1.3 Examples ................................................................................................................................................21

7.2 Package SPDX identifier field ................................................................................................................21

7.2.1 Description ............................................................................................................................................21

7.2.2 Intent .......................................................................................................................................................21

7.2.3 Examples ................................................................................................................................................21

7.3 Package version field ...............................................................................................................................22

7.3.1 Description ............................................................................................................................................22

7.3.2 Intent .......................................................................................................................................................22

7.3.3 Examples ................................................................................................................................................22

7.4 Package file name field ............................................................................................................................23

7.4.1 Description ............................................................................................................................................23

7.4.2 Intent .......................................................................................................................................................23

7.4.3 Examples ................................................................................................................................................23

7.5 Package supplier field .............................................................................................................................24

7.5.1 Description ............................................................................................................................................24

7.5.2 Intent .......................................................................................................................................................24

7.5.3 Examples ................................................................................................................................................24

7.6 Package originator field ..........................................................................................................................25

7.6.1 Description ............................................................................................................................................25

7.6.2 Intent .......................................................................................................................................................25

7.6.3 Examples ................................................................................................................................................25

7.7 Package download location field .........................................................................................................26

7.7.1 Description ............................................................................................................................................26

7.7.2 Intent .......................................................................................................................................................27

7.7.3 Examples ................................................................................................................................................27

7.8 Files analyzed field ...................................................................................................................................30

7.8.1 Description ............................................................................................................................................30

7.8.2 Intent .......................................................................................................................................................31

7.8.3 Examples ................................................................................................................................................31

iv © ISO #### – All rights reserved
© ISO/IEC 2020 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/IEC DIS 5962:2020(E)
ISO #####-#:####(X)

7.9 Package verification code field ............................................................................................................ 32

7.9.1 Description ............................................................................................................................................ 32

7.9.2 Intent ....................................................................................................................................................... 32

7.9.3 Examples ................................................................................................................................................ 33

7.10 Package checksum field ................................................................................................................... 33

7.10.1 Description ............................................................................................................................................ 33

7.10.2 Intent ....................................................................................................................................................... 34

7.10.3 Examples ................................................................................................................................................ 34

7.11 Package home page field .................................................................................................................. 34

7.11.1 Description ............................................................................................................................................ 34

7.11.2 Intent ....................................................................................................................................................... 35

7.11.3 Examples ................................................................................................................................................ 35

7.12 Source information field .................................................................................................................. 35

7.12.1 Description ............................................................................................................................................ 35

7.12.2 Intent ....................................................................................................................................................... 36

7.12.3 Examples ................................................................................................................................................ 36

7.13 Concluded license field ..................................................................................................................... 36

7.13.1 Description ............................................................................................................................................ 36

7.13.2 Intent ....................................................................................................................................................... 37

7.13.3 Examples ................................................................................................................................................ 37

7.14 All licenses information from files field ..................................................................................... 38

7.14.1 Description ............................................................................................................................................ 38

7.14.2 Intent ....................................................................................................................................................... 38

7.14.3 Examples ................................................................................................................................................ 39

7.15 Declared license field ........................................
...