On Fri, Sep 08, 2023 at 07:34:43AM -0700, Russ Allbery wrote: > I don't think the file format is the most interesting part of SPDX. They > don't really have a competing format equivalent to the functionality of > our copyright files (at least that I've seen; I vaguely follow their > lists). Last time I looked, they were doing a lot with XML, which I don't > think anyone would adopt for new formats these days. (YAML or TOML or > something like that is now a lot more popular.)
Formally, SPDX is only a data model, which supports several
serializations formats. The XML one is I believe the most common one
for some technically good reasons, but it does support YAML
serialization, as well as some lossy ones as well (like CSV, plaintext,
etc...).
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
More about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature
