3 Commits

Author SHA1 Message Date
Ariadne Conill
c598ef7218 spdxtool: use software_sbomType instead of sbomType
sbomType is not in the SPDX 3.0.1 vocabulary.
2025-11-01 23:56:00 -07:00
Ariadne Conill
bbe8ab6593 spdxtool: do not serialize missing license-related document elements
If a .pc file without licensing information was processed, we would get nodes like
pkgconf:(null), which is undesirable.
2025-11-01 15:54:15 -07:00
Tuukka Pasanen
f0826ce2d2 Add SPDX Lite profile 3.0 generator
Add SPDX Lite profile 3.0 generator named
spdxtool to pkdconf. It outputs JSON-LD RDF
tree and does only depend pkgconf and pkgconf
.pc file to generate SBOM.

It superseeds bomtool which is SPDX 2.x generator
name bomtool. But as SPDX version 2.x is still widely
used new tool was created instead of upgrading old one.
2025-11-01 15:31:55 -07:00