Short Description
Add support for SPDX JSON as an output format
Possible Labels
Enhancement
Select Category
Describe the Update
Add support for SPDX JSON. The tools-python library supports JSON - so this may be relatively straightforward to add. Note that it would be very incremental to add support for YAML in the same code update.
How This Feature will help you/your organization
I noticed in a recent review of different tools - Quality Assessment of SBOM Generation Tools and Standards on Open Source Projects - the scancode SPDX output could not be used in the evaluation due to the lack of JSON support. JSON has become one of the most popular formats used in SPDX 2.3. Adding direct support would likely benefit both scancode and SPDX adoption.
Possible Solution/Implementation Details
From the requirements.txt file, it looks like we are already using version 0.8.1 of the spdx-tools which support JSON output.
It looks like the changes are mostly (if not completely) localized to output_spdx.py plus any related documentation.
The code would need to be slightly refactored to use an enumeration rather than a Boolean to describe the output format choice for SPDX.
Can you help with this Feature
Although Python is not my primary language of choice, I could provide a pull request if it helps (although it may take a bit longer for a review cycle vs. someone more Python experienced).
Short Description
Add support for SPDX JSON as an output format
Possible Labels
Enhancement
Select Category
Describe the Update
Add support for SPDX JSON. The tools-python library supports JSON - so this may be relatively straightforward to add. Note that it would be very incremental to add support for YAML in the same code update.
How This Feature will help you/your organization
I noticed in a recent review of different tools - Quality Assessment of SBOM Generation Tools and Standards on Open Source Projects - the scancode SPDX output could not be used in the evaluation due to the lack of JSON support. JSON has become one of the most popular formats used in SPDX 2.3. Adding direct support would likely benefit both scancode and SPDX adoption.
Possible Solution/Implementation Details
From the requirements.txt file, it looks like we are already using version 0.8.1 of the spdx-tools which support JSON output.
It looks like the changes are mostly (if not completely) localized to output_spdx.py plus any related documentation.
The code would need to be slightly refactored to use an enumeration rather than a Boolean to describe the output format choice for SPDX.
Can you help with this Feature
Although Python is not my primary language of choice, I could provide a pull request if it helps (although it may take a bit longer for a review cycle vs. someone more Python experienced).