Mar 12

Versions 1.1 and later of the Source Auditor Source Scanner tools supports the output of SPDX files.  The current SPDX specification versions are supported.

Source Scanner will export all licensing and origin information identified by the tool as well as copyright information collected during the scan.

SPDX files by identifying the origin (artifactOf), licenses and copyrights which can then be exported to an SPDX RDF file.  Additional tools provided by Source Auditor and available at spdx.org/tools can convert the RDF file to a spreadsheet format or a text file format for easy viewing.  A compare utility is also available to compare the SPDX output provided by the Source Scanner to supplier versions of SPDX.

The Software Package Data Exchange® (SPDX®) specification is a standard format for communicating the components, licenses and copyrights associated with a software package. This wiki site is the workspace for SPDX Teams. Please see spdx.org for general information, the current specification, license list, and additional information on the specification.