-
Notifications
You must be signed in to change notification settings - Fork 42
Closed
Description
Tested on version 1.1.4.
As described in https://spdx.github.io/spdx-spec/v2.2.2/file-information/#86-license-information-in-file-field, LicenseInfoInFile: is of cardinallity 1..* and the given example is
LicenseInfoInFile: GPL-2.0-only
LicenseInfoInFile: LicenseRef-2
But running the Verify on a document containing multiple entries of LicenseInfoInFile for a single file results in
Analysis exception processing SPDX file: Unexpected Error: org.spdx.library.model.SpdxInvalidTypeException: Trying to add a list for non list type for property licenseInfoInFile
This fails verification.
The "old java tools" accept such a file as valid.
FOSSology for example writes documents with this pattern.
Metadata
Metadata
Assignees
Labels
No labels