The latest version of the SPDX specification removes references to SPDX-License-Identifier tags in source code. We're unsure if this is intentional.
https://gnats.netbsd.org/60308
https://github.com/spdx/spdx-spec/commit/2acae715e971f8b84da8ea85f93849bdcf89c5ab
Comments (2)
@lanodan SPDX website is all about bills of materials, risk management, and AI. Doesn't seem like open source projects are the intended audience at all
@netbsd @lanodan
Trying to analyze an SPDX file related to a Linux or BSD distribution is actually quite hard, and time-consuming.
Ask me how I know...