{"id":423378,"date":"2024-10-20T06:46:10","date_gmt":"2024-10-20T06:46:10","guid":{"rendered":"https:\/\/pdfstandards.shop\/product\/uncategorized\/bs-iso-iec-59622021-2\/"},"modified":"2024-10-26T12:42:03","modified_gmt":"2024-10-26T12:42:03","slug":"bs-iso-iec-59622021-2","status":"publish","type":"product","link":"https:\/\/pdfstandards.shop\/product\/publishers\/bsi\/bs-iso-iec-59622021-2\/","title":{"rendered":"BS ISO\/IEC 5962:2021"},"content":{"rendered":"
This Software Package Data Exchange\u00ae (SPDX\u00ae) specification defines a standard data format for communicating the component and metadata information associated with software packages. An SPDX document can be associated with a set of software packages, files or snippets and contains information about the software in the SPDX format described in this specification.<\/p>\n
PDF Pages<\/th>\n | PDF Title<\/th>\n<\/tr>\n | ||||||
---|---|---|---|---|---|---|---|
2<\/td>\n | undefined <\/td>\n<\/tr>\n | ||||||
15<\/td>\n | Foreword <\/td>\n<\/tr>\n | ||||||
16<\/td>\n | Introduction <\/td>\n<\/tr>\n | ||||||
17<\/td>\n | 1 Scope 2 Normative references <\/td>\n<\/tr>\n | ||||||
18<\/td>\n | 3 Terms and definitions <\/td>\n<\/tr>\n | ||||||
19<\/td>\n | 4 Conformance 4.1 SPDX Current and Previous Versions 4.2 Obsolete features 4.3 Alternate notation for some conformance requirements <\/td>\n<\/tr>\n | ||||||
20<\/td>\n | 4.4 Standard data format requirements <\/td>\n<\/tr>\n | ||||||
21<\/td>\n | 4.5 Trademark Compliance 4.6 The SPDX Lite profile <\/td>\n<\/tr>\n | ||||||
22<\/td>\n | 5 Composition of an SPDX document 5.1 What this specification covers <\/td>\n<\/tr>\n | ||||||
23<\/td>\n | 5.2 Sections 5.2.1 SPDX document creation information section 5.2.2 Package information section <\/td>\n<\/tr>\n | ||||||
24<\/td>\n | 5.2.3 File information section 5.2.4 Snippet information section <\/td>\n<\/tr>\n | ||||||
25<\/td>\n | 5.2.5 Other licensing information detected section 5.2.6 Relationships between SPDX elements information section 5.2.7 Annotations information section 5.2.8 Review information section <\/td>\n<\/tr>\n | ||||||
26<\/td>\n | 5.3 What this specification does not cover 6 SPDX document creation information section 6.1 SPDX version field 6.1.1 Description 6.1.2 Intent 6.1.3 Examples <\/td>\n<\/tr>\n | ||||||
27<\/td>\n | 6.2 Data license field 6.2.1 Description 6.2.2 Intent 6.2.3 Examples <\/td>\n<\/tr>\n | ||||||
28<\/td>\n | 6.3 SPDX identifier field 6.3.1 Description 6.3.2 Intent 6.3.3 Examples 6.4 Document name field 6.4.1 Description <\/td>\n<\/tr>\n | ||||||
29<\/td>\n | 6.4.2 Intent 6.4.3 Examples 6.5 SPDX document namespace field 6.5.1 Description <\/td>\n<\/tr>\n | ||||||
30<\/td>\n | 6.5.2 Intent <\/td>\n<\/tr>\n | ||||||
31<\/td>\n | 6.5.3 Examples 6.6 External document references field 6.6.1 Description 6.6.2 Intent <\/td>\n<\/tr>\n | ||||||
32<\/td>\n | 6.6.3 Examples 6.7 License list version field 6.7.1 Description <\/td>\n<\/tr>\n | ||||||
33<\/td>\n | 6.7.2 Intent 6.7.3 Examples 6.8 Creator field 6.8.1 Description <\/td>\n<\/tr>\n | ||||||
34<\/td>\n | 6.8.2 Intent 6.8.3 Examples 6.9 Created field 6.9.1 Description <\/td>\n<\/tr>\n | ||||||
35<\/td>\n | 6.9.2 Intent 6.9.3 Examples 6.10 Creator comment field 6.10.1 Description <\/td>\n<\/tr>\n | ||||||
36<\/td>\n | 6.10.2 Intent 6.10.3 Examples 6.11 Document comment field 6.11.1 Description <\/td>\n<\/tr>\n | ||||||
37<\/td>\n | 6.11.2 Intent 6.11.3 Examples 7 Package information section 7.1 Package name field 7.1.1 Description 7.1.2 Intent 7.1.3 Examples <\/td>\n<\/tr>\n | ||||||
38<\/td>\n | 7.2 Package SPDX identifier field 7.2.1 Description 7.2.2 Intent 7.2.3 Examples <\/td>\n<\/tr>\n | ||||||
39<\/td>\n | 7.3 Package version field 7.3.1 Description 7.3.2 Intent 7.3.3 Examples 7.4 Package file name field 7.4.1 Description <\/td>\n<\/tr>\n | ||||||
40<\/td>\n | 7.4.2 Intent 7.4.3 Examples 7.5 Package supplier field 7.5.1 Description <\/td>\n<\/tr>\n | ||||||
41<\/td>\n | 7.5.2 Intent 7.5.3 Examples 7.6 Package originator field 7.6.1 Description <\/td>\n<\/tr>\n | ||||||
42<\/td>\n | 7.6.2 Intent 7.6.3 Examples <\/td>\n<\/tr>\n | ||||||
43<\/td>\n | 7.7 Package download location field 7.7.1 Description <\/td>\n<\/tr>\n | ||||||
44<\/td>\n | 7.7.2 Intent 7.7.3 Examples <\/td>\n<\/tr>\n | ||||||
48<\/td>\n | 7.8 Files analyzed field 7.8.1 Description 7.8.2 Intent <\/td>\n<\/tr>\n | ||||||
49<\/td>\n | 7.8.3 Examples 7.9 Package verification code field 7.9.1 Description <\/td>\n<\/tr>\n | ||||||
50<\/td>\n | 7.9.2 Intent 7.9.3 Examples <\/td>\n<\/tr>\n | ||||||
51<\/td>\n | 7.10 Package checksum field 7.10.1 Description 7.10.2 Intent 7.10.3 Examples <\/td>\n<\/tr>\n | ||||||
52<\/td>\n | 7.11 Package home page field 7.11.1 Description <\/td>\n<\/tr>\n | ||||||
53<\/td>\n | 7.11.2 Intent 7.11.3 Examples 7.12 Source information field 7.12.1 Description <\/td>\n<\/tr>\n | ||||||
54<\/td>\n | 7.12.2 Intent 7.12.3 Examples 7.13 Concluded license field 7.13.1 Description <\/td>\n<\/tr>\n | ||||||
55<\/td>\n | 7.13.2 Intent 7.13.3 Examples <\/td>\n<\/tr>\n | ||||||
56<\/td>\n | 7.14 All licenses information from files field 7.14.1 Description 7.14.2 Intent <\/td>\n<\/tr>\n | ||||||
57<\/td>\n | 7.14.3 Examples 7.15 Declared license field 7.15.1 Description <\/td>\n<\/tr>\n | ||||||
58<\/td>\n | 7.15.2 Intent 7.15.3 Examples <\/td>\n<\/tr>\n | ||||||
59<\/td>\n | 7.16 Comments on license field 7.16.1 Description 7.16.2 Intent 7.16.3 Examples <\/td>\n<\/tr>\n | ||||||
60<\/td>\n | 7.17 Copyright text field 7.17.1 Description 7.17.2 Intent 7.17.3 Examples <\/td>\n<\/tr>\n | ||||||
61<\/td>\n | 7.18 Package summary description field 7.18.1 Description 7.18.2 Intent 7.18.3 Examples 7.19 Package detailed description field 7.19.1 Description <\/td>\n<\/tr>\n | ||||||
62<\/td>\n | 7.19.2 Intent 7.19.3 Examples 7.20 Package comment field 7.20.1 Description <\/td>\n<\/tr>\n | ||||||
63<\/td>\n | 7.20.2 Intent 7.20.3 Examples 7.21 External reference field 7.21.1 Description <\/td>\n<\/tr>\n | ||||||
64<\/td>\n | 7.21.2 Intent 7.21.3 Examples <\/td>\n<\/tr>\n | ||||||
65<\/td>\n | 7.22 External reference comment field 7.22.1 Description 7.22.2 Intent <\/td>\n<\/tr>\n | ||||||
66<\/td>\n | 7.22.3 Examples 7.23 Package attribution text field 7.23.1 Description <\/td>\n<\/tr>\n | ||||||
67<\/td>\n | 7.23.2 Intent 7.23.3 Examples 8 File information section 8.1 File name field 8.1.1 Description <\/td>\n<\/tr>\n | ||||||
68<\/td>\n | 8.1.2 Intent 8.1.3 Examples 8.2 File SPDX identifier field 8.2.1 Description 8.2.2 Intent 8.2.3 Examples <\/td>\n<\/tr>\n | ||||||
69<\/td>\n | 8.3 File type field 8.3.1 Description <\/td>\n<\/tr>\n | ||||||
70<\/td>\n | 8.3.2 Intent 8.3.3 Examples 8.4 File checksum field 8.4.1 Description <\/td>\n<\/tr>\n | ||||||
71<\/td>\n | 8.4.2 Intent 8.4.3 Examples <\/td>\n<\/tr>\n | ||||||
72<\/td>\n | 8.5 Concluded license field 8.5.1 Description 8.5.2 Intent 8.5.3 Examples <\/td>\n<\/tr>\n | ||||||
73<\/td>\n | 8.6 License information in file field 8.6.1 Description <\/td>\n<\/tr>\n | ||||||
74<\/td>\n | 8.6.2 Intent 8.6.3 Examples 8.7 Comments on license field 8.7.1 Description <\/td>\n<\/tr>\n | ||||||
75<\/td>\n | 8.7.2 Intent 8.7.3 Examples 8.8 Copyright text field 8.8.1 Description <\/td>\n<\/tr>\n | ||||||
76<\/td>\n | 8.8.2 Intent 8.8.3 Examples 8.9 Artifact of project name field (deprecated) 8.9.1 Description <\/td>\n<\/tr>\n | ||||||
77<\/td>\n | 8.9.2 Intent 8.9.3 Examples 8.10 Artifact of project homepage field (deprecated) 8.10.1 Description 8.10.2 Intent 8.10.3 Examples <\/td>\n<\/tr>\n | ||||||
78<\/td>\n | 8.11 Artifact of project uniform resource identifier field (deprecated) 8.11.1 Description 8.11.2 Intent 8.11.3 Examples <\/td>\n<\/tr>\n | ||||||
79<\/td>\n | 8.12 File comment field 8.12.1 Description 8.12.2 Intent 8.12.3 Examples 8.13 File notice field 8.13.1 Description <\/td>\n<\/tr>\n | ||||||
80<\/td>\n | 8.13.2 Intent 8.13.3 Examples 8.14 File contributor field 8.14.1 Description 8.14.2 Intent <\/td>\n<\/tr>\n | ||||||
81<\/td>\n | 8.14.3 Examples 8.15 File attribution text field 8.15.1 Description 8.15.2 Intent <\/td>\n<\/tr>\n | ||||||
82<\/td>\n | 8.15.3 Examples 8.16 File dependencies field (deprecated) 8.16.1 Description 8.16.2 Intent <\/td>\n<\/tr>\n | ||||||
83<\/td>\n | 8.16.3 Examples 9 Snippet information section 9.1 Snippet SPDX identifier field 9.1.1 Description <\/td>\n<\/tr>\n | ||||||
84<\/td>\n | 9.1.2 Intent 9.1.3 Examples 9.2 Snippet from file SPDX identifier field 9.2.1 Description <\/td>\n<\/tr>\n | ||||||
85<\/td>\n | 9.2.2 Intent 9.2.3 Examples <\/td>\n<\/tr>\n | ||||||
86<\/td>\n | 9.3 Snippet byte range field 9.3.1 Description 9.3.2 Intent 9.3.3 Examples <\/td>\n<\/tr>\n | ||||||
87<\/td>\n | 9.4 Snippet line range field 9.4.1 Description 9.4.2 Intent 9.4.3 Examples <\/td>\n<\/tr>\n | ||||||
88<\/td>\n | 9.5 Snippet concluded license field 9.5.1 Description <\/td>\n<\/tr>\n | ||||||
89<\/td>\n | 9.5.2 Intent 9.5.3 Examples <\/td>\n<\/tr>\n | ||||||
90<\/td>\n | 9.6 License information in snippet field 9.6.1 Description <\/td>\n<\/tr>\n | ||||||
91<\/td>\n | 9.6.2 Intent 9.6.3 Examples 9.7 Snippet comments on license field 9.7.1 Description 9.7.2 Intent 9.7.3 Examples <\/td>\n<\/tr>\n | ||||||
92<\/td>\n | 9.8 Snippet copyright text field 9.8.1 Description 9.8.2 Intent 9.8.3 Examples <\/td>\n<\/tr>\n | ||||||
93<\/td>\n | 9.9 Snippet comment field 9.9.1 Description 9.9.2 Intent 9.9.3 Examples <\/td>\n<\/tr>\n | ||||||
94<\/td>\n | 9.10 Snippet name field 9.10.1 Description 9.10.2 Intent 9.10.3 Examples 9.11 Snippet attribution text field 9.11.1 Description <\/td>\n<\/tr>\n | ||||||
95<\/td>\n | 9.11.2 Intent 9.11.3 Examples 10 Other licensing information detected section 10.1 License identifier field 10.1.1 Description <\/td>\n<\/tr>\n | ||||||
96<\/td>\n | 10.1.2 Intent 10.1.3 Examples 10.2 Extracted text field 10.2.1 Description <\/td>\n<\/tr>\n | ||||||
97<\/td>\n | 10.2.2 Intent 10.2.3 Examples <\/td>\n<\/tr>\n | ||||||
98<\/td>\n | 10.3 License name field 10.3.1 Description 10.3.2 Intent 10.3.3 Examples 10.4 License cross reference field 10.4.1 Description <\/td>\n<\/tr>\n | ||||||
99<\/td>\n | 10.4.2 Intent 10.4.3 Examples 10.5 License comment field 10.5.1 Description 10.5.2 Intent 10.5.3 Examples <\/td>\n<\/tr>\n | ||||||
100<\/td>\n | 11 Relationships between SPDX elements information section 11.1 Relationship field 11.1.1 Description <\/td>\n<\/tr>\n | ||||||
105<\/td>\n | 11.1.2 Intent 11.1.3 Examples <\/td>\n<\/tr>\n | ||||||
106<\/td>\n | 11.2 Relationship comment field 11.2.1 Description 11.2.2 Intent 11.2.3 Examples <\/td>\n<\/tr>\n | ||||||
107<\/td>\n | 12 Annotations information section 12.1 Annotator field 12.1.1 Description 12.1.2 Intent 12.1.3 Examples <\/td>\n<\/tr>\n | ||||||
108<\/td>\n | 12.2 Annotation date field 12.2.1 Description 12.2.2 Intent 12.2.3 Examples <\/td>\n<\/tr>\n | ||||||
109<\/td>\n | 12.3 Annotation type field 12.3.1 Description 12.3.2 Intent 12.3.3 Examples 12.4 SPDX identifier reference field 12.4.1 Description <\/td>\n<\/tr>\n | ||||||
110<\/td>\n | 12.4.2 Intent 12.4.3 Examples 12.5 Annotation comment field 12.5.1 Description <\/td>\n<\/tr>\n | ||||||
111<\/td>\n | 12.5.2 Intent 12.5.3 Examples 13 Review information section (deprecated) 13.1 Reviewer field (deprecated) 13.1.1 Description <\/td>\n<\/tr>\n | ||||||
112<\/td>\n | 13.1.2 Intent 13.1.3 Examples 13.2 Review date field (deprecated) 13.2.1 Description <\/td>\n<\/tr>\n | ||||||
113<\/td>\n | 13.2.2 Intent 13.2.3 Examples 13.3 Review comment field (deprecated) 13.3.1 Description <\/td>\n<\/tr>\n | ||||||
114<\/td>\n | 13.3.2 Intent 13.3.3 Examples <\/td>\n<\/tr>\n | ||||||
115<\/td>\n | Annex A (Informative) SPDX license list A.1 Licenses with short identifiers <\/td>\n<\/tr>\n | ||||||
130<\/td>\n | A.2 Exceptions list <\/td>\n<\/tr>\n | ||||||
132<\/td>\n | A.3 Deprecated licenses <\/td>\n<\/tr>\n | ||||||
134<\/td>\n | Annex B (Informative) License matching guidelines and templates B.1 SPDX license list matching guidelines B.2 How these guidelines are applied B.2.1 Purpose B.2.2 Guideline: official license headers B.3 Substantive text B.3.1 Purpose B.3.2 Guideline: verbatim text <\/td>\n<\/tr>\n | ||||||
135<\/td>\n | B.3.3 Guideline: no additional text B.3.4 Guideline: replaceable text B.3.5 Guideline: omittable text B.4 Whitespace B.4.1 Purpose B.4.2 Guideline B.5 Capitalization B.5.1 Purpose <\/td>\n<\/tr>\n | ||||||
136<\/td>\n | B.5.2 Guideline B.6 Punctuation B.6.1 Purpose B.6.2 Guideline: punctuation B.6.3 Guideline: hyphens, dashes B.6.4 Guideline: quotes B.7 Code comment indicators B.7.1 Purpose B.7.2 Guideline B.8 Bullets and numbering B.8.1 Purpose <\/td>\n<\/tr>\n | ||||||
137<\/td>\n | B.8.2 Guideline B.9 Varietal word spelling B.9.1 Purpose B.9.2 Guideline B.10 Copyright symbol B.10.1 Purpose B.10.2 Guideline B.11 Copyright notice B.11.1 Purpose <\/td>\n<\/tr>\n | ||||||
138<\/td>\n | B.11.2 Guideline B.12 License name or title B.12.1 Purpose B.12.2 Guideline B.13 Extraneous text at the end of a license B.13.1 Purpose B.13.2 Guideline B.14 HTTP protocol B.14.1 Purpose B.14.2 Guideline <\/td>\n<\/tr>\n | ||||||
139<\/td>\n | B.15 SPDX license list B.15.1 Template access B.15.2 Template format <\/td>\n<\/tr>\n | ||||||
140<\/td>\n | Annex C (Normative) RDF object model and identifier syntax C.1 Introduction <\/td>\n<\/tr>\n | ||||||
141<\/td>\n | C.2 Agent and tool identifiers <\/td>\n<\/tr>\n | ||||||
142<\/td>\n | Annex D (Normative) SPDX license expressions D.1 Overview <\/td>\n<\/tr>\n | ||||||
143<\/td>\n | D.2 Case sensitivity D.3 Simple license expressions D.4 Composite license expressions D.4.1 Introduction <\/td>\n<\/tr>\n | ||||||
144<\/td>\n | D.4.2 Disjunctive “OR” Operator D.4.3 Conjunctive “AND” Operator D.4.4 Exception “WITH” Operator <\/td>\n<\/tr>\n | ||||||
145<\/td>\n | D.4.5 Order of precedence and parentheses D.4.6 License expressions in RDF <\/td>\n<\/tr>\n | ||||||
147<\/td>\n | Annex E (Informative) Using SPDX license list short identifiers in source files E.1 Introduction E.2 Format for SPDX-License-Identifier <\/td>\n<\/tr>\n | ||||||
148<\/td>\n | E.3 Representing single license E.4 Representing multiple licenses <\/td>\n<\/tr>\n | ||||||
150<\/td>\n | Annex F (Normative) External repository identifiers F.1 Introduction F.2 Security F.2.1 cpe22Type F.2.2 cpe23Type <\/td>\n<\/tr>\n | ||||||
151<\/td>\n | F.3 Package-Manager F.3.1 maven-central F.3.2 npm F.3.3 nuget <\/td>\n<\/tr>\n | ||||||
152<\/td>\n | F.3.4 bower F.3.5 purl F.4 Persistent-Id F.4.1 swh <\/td>\n<\/tr>\n | ||||||
153<\/td>\n | F.5 Other F.5.1 [idstring] <\/td>\n<\/tr>\n | ||||||
154<\/td>\n | Annex G (Normative) SPDX Lite G.1 Explanation of SPDX Lite G.2 Format of SPDX Lite G.3 Table of SPDX Lite fields <\/td>\n<\/tr>\n | ||||||
156<\/td>\n | Annex H (Informative) SPDX file tags H.1 Rationale H.2 Format <\/td>\n<\/tr>\n | ||||||
157<\/td>\n | H.3 Caveats <\/td>\n<\/tr>\n | ||||||
158<\/td>\n | Annex I (Informative) Differences from previous editions I.1 Differences between V2.2.1 and V2.2 <\/td>\n<\/tr>\n | ||||||
159<\/td>\n | I.2 Differences from V2.2 and V2.1 I.3 Differences between V2.1 and V2.0 <\/td>\n<\/tr>\n | ||||||
160<\/td>\n | I.4 Differences between V2.0 and V1.2 <\/td>\n<\/tr>\n | ||||||
161<\/td>\n | Bibliography <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":" Information technology. SPDX\u00ae Specification V2.2.1<\/b><\/p>\n |