Golang tools roadmap (v0.4.0 and beyond)

[lumjjb]

2022 2H (v0.4.0)

• 2.3 support SPDX 2.3 Support #156
  • struct
  • functions
• Misc
  • Support more checksum algorithms #139
  • add(package): add const for external reference #153

v0.5.0 (2023 Q1)

• Core model Adding minor versions: Versioning refactor proposal #152
  • Mapping from 2.1/2 to core
  • Do deduplication of code
• Collect usage patterns for open source and org use (Collect usage patterns to help drive adoption of tools-golang #157)
• Higher level helper function/libraries to use See how to integrate library into kubernetes-sigs/bom #144
  • base: here's how to interact with SPDX elements
  • context-specific: to work with container images, rpm, deb (will use base library)
  • Upstream use of tools-golang to bom tool

v0.5.1 (2023 Q2)

• Formats
  • RDF Saver  #150
• Misc
  • Add tests to CI for Windows (and maybe others) #117
  • Update licensing and dependency statements #140
  • Get OpenSSF Best Practices badge #110

v0.6.0 (2023 H2)

• SPDX 3.0
• SBOMs for releases: see Auto-generate SPDX SBOM for each release #118
• Collect usage patterns
  • License expression modeling and syntax #158 License usage (@swinslow) - people may want to be able to reason about it as tree (ANDs of licenses), etc. Moving from simple strings to structured data. Figure out how to parse license grammar (pretty involved).
• Formats
  • Spreadsheet / XLSX parser and writer #138

[lumjjb]

@swinslow @RishabhBhatnagar re-organized this to more realistic timelines and to prioritize a q4 release.

[nishakm]

@lumjjb Any movement on implementing SPDX 3.0 based on the RC-2 release?