Google Git
Sign in
fuchsia / third_party / github.com / spdx / tools-golang / refs/tags/v0.1.0
commitad870ed6f31eb4918018af143611a5a2dc6aa798[log] [tgz]
authorSteve Winslow <steve@swinslow.net>Sat Mar 20 15:29:57 2021 -0400
committerGitHub <noreply@github.com>Sat Mar 20 15:29:57 2021 -0400
treeac6138c2ad97366ef527c9a6add54f36ac951941
parenta16d50ee155238df280a68252acc25e9afb7acea [diff]
parentbef9776a1bb49b5212b3481988889bb8593ca6e7 [diff]
Merge pull request #62 from swinslow/issue-61

Update README for v0.1.0 release
tree: ac6138c2ad97366ef527c9a6add54f36ac951941
  1. .github/
  2. builder/
  3. docs/
  4. examples/
  5. idsearcher/
  6. licensediff/
  7. rdfloader/
  8. reporter/
  9. spdx/
  10. spdxlib/
  11. testdata/
  12. tvloader/
  13. tvsaver/
  14. utils/
  15. .gitignore
  16. CONTRIBUTING.md
  17. go.mod
  18. go.sum
  19. LICENSE-code.txt
  20. LICENSE-docs.txt
  21. README.md
README.md

Build Status Coverage Status

tools-golang

tools-golang is a collection of Go packages intended to make it easier for Go programs to work with SPDX® files.

This software is in an early state, and its API may change significantly.

Recent news

2021-03-20: v0.1.0: initial pre-v1 release tagged, prior to making more extensive API changes in some pending PRs.

What it does

tools-golang currently works with files conformant to versions 2.1 and 2.2 of the SPDX specification, available at: https://spdx.org/specifications

tools-golang provides the following packages:

  • spdx - in-memory data model for the sections of an SPDX document
  • tvloader - tag-value file loader
  • tvsaver - tag-value file saver
  • rdfloader - RDF file loader
  • builder - builds “empty” SPDX document (with hashes) for directory contents
  • idsearcher - searches for SPDX short-form IDs and builds SPDX document
  • licensediff - compares concluded licenses between files in two packages
  • reporter - generates basic license count report from SPDX document
  • utils - various utility functions that support the other tools-golang packages

Examples for how to use these packages can be found in the examples/ directory.

RDF support was added by @RishabhBhatnagar as part of his Google Summer of Code 2020 project, and is in the process of being merged into the main tools-golang code.

What it doesn't do

tools-golang doesn't currently do any of the following:

  • work with files under any version of the SPDX spec prior to v2.1
  • convert between different versions of SPDX documents (e.g., from 2.1 to 2.2)
  • enable applications to interact with SPDX files without needing to care (too much) about the particular SPDX file version

We are working towards adding functionality for all of these. Code contributions are welcome!

Requirements

tools-golang uses https://github.com/spdx/gordf to manage RDF input and output.

Other than that, tools-golang does not require anything outside the Go standard library.

Licenses

As indicated in LICENSE-code.txt, tools-golang source code files are provided and may be used, at your option, under either:

  • Apache License, version 2.0 (Apache-2.0), OR
  • GNU General Public License, version 2.0 or later (GPL-2.0-or-later).

As indicated in LICENSE-docs.txt, tools-golang documentation files are provided and may be used under the Creative Commons Attribution 4.0 International license (CC-BY-4.0).

This README.md file is documentation:

SPDX-License-Identifier: CC-BY-4.0