Umgangatho we-SPDX 2.2 wokutshintshiselana ngolwazi lwelayisenisi kwiipakethe upapashiwe

Isiseko seLinux thaca uhlelo olutsha lomgangatho I-SPDX 2.2 (I-Software Package Data Exchange), enikezela ngeseti yeenkcukacha zokupapasha kunye nokutshintshana kwelayisenisi kunye nolwazi lwepropathi yengqondo. Ukucaciswa kukuvumela ukuba ukhankanye kuphela ilayisenisi ngokubanzi kwiphakheji yonke, kodwa kwakhona ukucacisa iimpawu zelayisensi yeefayile ezizimeleyo kunye neziqhekeza, ukubonisa abanini bamalungelo epropati kwikhowudi kunye nabantu ababandakanyekayo ekuphononongeni ukucoceka kwayo kwelayisensi.

I-SPDX inikezela ngemephu ecacileyo yepropathi enomgangatho ophezulu wokuqonda esetyenziswe kwiphakheji, ikuvumela ukuba uhlole ngokukhawuleza umngcipheko onokwenzeka, uchonge ukungahambelani okunokwenzeka kwaye uqonde imigaqo yokusetyenziswa ebekwe yilayisenisi. Ukusebenzisa i-SPDX, abavelisi bezixhobo zabathengi banokuqinisekisa ukuthotyelwa ngokupheleleyo kunye neelayisensi ezivulekileyo kwiimveliso zabo kwaye bachonge ukungahambelani kwelayisenisi kwi-firmware esebenzisa umxube wezicelo ezivulekileyo kunye nezobunini. Ifomathi ilungiselelwe ukuqhubekeka ngokuzenzekelayo, kodwa izinto eziluncedo zikwabonelelwa ngokuguqula iifayile zeSPDX zibe ngumelo olufundeka ngumntu.

Π’ uhlelo olutsha inani leemeko ezinemizekelo yokusebenzisa i-SPDX liye landiswa, iifomati ezintsha zamaxwebhu e-SPDX (JSON, YAML, XML) zicetywayo, iintlobo ezintsha zokubophelela ezixhomekeke zongezwa, amasimi adityanisiwe ukuze abonise ububhali beepakethi, iifayile. kunye neziqwengana zekhowudi, izazisi ezintsha ze-PURL (i-Package URLs) zongeziwe, kunye ne-SWIDs (i-Software Heritage Persistent Identifiers), ifomati eyenziwe lula ye-SPDX Lite yaziswa, ukukwazi ukukhankanya izichongi zelayisensi ezifinyeziweyo kwiifayile zinikezelwe, kunye nenkxaso yemigca emininzi. iintetho zokuchaza iphepha-mvume longeziwe.

umthombo: opennet.ru

Yongeza izimvo