Share as SPDX

[jeffmcaffer]

SPDX is a great way to put data into software component management systems. Given that ClearlyDefined has lots of interesting data and allows users to manage lists of components, it makes sense that a user be able to Share this data in SPDX format. There are multiple aspects to this

1. Need a mapping to/from ClearlyDefined and SPDX fields and values
2. Service code that actually formulates the SPDX syntax (see Summarize API should be able to produce valid SPDX files service#14)
3. UI affordance that allows users to share the SPDX
   • This should be on the Definitions page to get document (or set of documents) for the list of components in the list
   • On the full details page to share the SPDX for just one definition

@tsteenbe and @kestewart for awareness

[jeffmcaffer]

This work is pending the mapping from clearly defined to spdx data. With that in place we can hopefully get someone from the SPDX community to help implement in an authoritative way.

[maxhbr]

Is there somewhere already a draft or some WIP version of this mapping? Or was there already some discussion? This would help me to understand the ClearlyDefined data model and how it relates to FOSSology.

[jeffmcaffer]

Unfortunately no. We have gone over the definition schema with Kate a few times informally but a) it has changed since then and b) we never really got as concrete as to capture a mapping.

Best place to start is https://github.com/clearlydefined/service/blob/master/schemas/definition-1.0.json. Do note that there are a couple of additions in the works but nothing whacky.

Thanks for looking at this.

[carmenbianca]

I would like to bump this issue. This would be immensely useful.