Tethys.SPDX.Interfaces 1.0.1

Tethys.SPDX

The Software Package Data Exchange (SPDX) is an open standard for describing a software bill of material. SPDX focuses especially on licensing and copyright imformation.

License and copyright scanners like FOSSology for example use this standard to provide their scan results.

Having a format to describe all the different scenarios of license findings, license relations, and copyright findings is not trivial, so SPDX can get quite complex.

The libraries in this project support two tasks:

• load the SPDX license list and provide it to .Net applications
• parse SPDX files and provide the contained data in a .Net way

Please note that due to the complexity of the SPDX standard not all possible SPDX files can be parsed. But the libraries are open source, so feel free to enhance them.

Get Package

The following packages are available on NuGet:

• Tethys.SPDX.Interfaces
• Tethys.SPDX.KnownLicenses
• Tethys.SPDX.Model
• Tethys.SPDX.SimpleSpdxParser
• Tethys.SPDX.Support

This library has been influenced by the following GitHub projects:

• https://github.com/jslicense/spdx-expression-parse.js
• https://github.com/microsoft/spdx-simplify

SPDX

See https://spdx.org/licenses/ for more details on SPDX, the software package data exchange format, the SPDX license identifiers and matching guidelines.

The Software Package Data Exchange (SPDX) Specification https://spdx.github.io/spdx-spec/

XML data of all SPDX licenses:
https://github.com/spdx/license-list-XML

How to use Tethys.SPDX

The SPDX license information is not part of the libraries, you have to download it from SPDX License List and place it in a local folder.

Very simple demo

A minimal code snippet looks like this

var knownLicenseManager = new KnownLicenseManager();
knownLicenseManager.LoadSpdxSourceFiles(...SPDX license files...);
knownLicenseManager.LoadSpdxSourceFiles(...SPDX license exception files...);

var reader = new RdfParser(knownLicenseManager);
var spdxDoc = reader.ReadFromFile(...SPDX file...);
...

Just run the demo application

dotnet run --project .\SpdxParserDemo\SpdxParserDemo.csproj <SpdxFile>

Build

Requisites

• Visual Studio 2023
• NuGet access

Required NuGet Packages

• Tethys.Logging, version 1.6.0
• Newtonsoft.Json, version 12.0.3

Build Solution

Just use the basic dotnet command:

dotnet build

Run the demo application:

dotnet run --project .\Tethys.Dgml.Demo\Tethys.Dgml.Demo.csproj

License

Tethys.SPDX is licensed under the Apache License, Version 2.0.