incorrect SPDX v2.3 → v3.0 external references in example4-bin.json #124

Activity

1. goneall commented on Sep 18, 2026

   

   goneall

   on Sep 18, 2026

   Member

   More actions

   This is due to the examples being generated from the SPDX spec version 2 examples using the SPDX converter.

   It raises an interesting question about how we should handle converting external references. I created spdx/Spdx-Java-Library#449 to track.
2. bact commented on Sep 23, 2026

   

   bact

   on Sep 23, 2026

   Collaborator

   More actions

   Discussed in 22 Sep 2026 Tech call:

   Two related issues:

   1. Invalid examples from the automated conversion (generation) - short-term
   2. Lack of standardized way for conversion - long-term

   • The (1) should be fixed, PR is at Fix Example4 ExternalSpdxIds #125 (conflicts need to be resolved)
   • The (2) can be a guidance in https://spdx.github.io/using/
   • Will continue discussion in Implementers call this week (Wednesday)
3. goneall

   closed this as completedin #125on Sep 24, 2026