Update examples for version 2.3

examples/SPDXJSONExample-v2.2.spdx.json → examples/SPDXJSONExample-v2.3.spdx.json

@@ -1,11 +1,11 @@
 {
   "SPDXID" : "SPDXRef-DOCUMENT",
-  "spdxVersion" : "SPDX-2.2",
+  "spdxVersion" : "SPDX-2.3",
   "creationInfo" : {
     "comment" : "This package has been shipped in source and binary form.\nThe binaries were created with gcc 4.5.1 and expect to link to\ncompatible system run time libraries.",
     "created" : "2010-01-29T18:30:22Z",
     "creators" : [ "Tool: LicenseFind-1.0", "Organization: ExampleCodeInspect ()", "Person: Jane Doe ()" ],
-    "licenseListVersion" : "3.9"
+    "licenseListVersion" : "3.17"
   },
   "name" : "SPDX-Tools-v2.0",
   "dataLicense" : "CC0-1.0",
@@ -56,8 +56,8 @@
     "annotator" : "Person: Suzanne Reviewer",
     "comment" : "Another example reviewer."
   } ],
-  "documentNamespace" : "http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301",
   "documentDescribes" : [ "SPDXRef-File", "SPDXRef-Package" ],
+  "documentNamespace" : "http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301",
   "packages" : [ {
     "SPDXID" : "SPDXRef-Package",
     "annotations" : [ {
@@ -67,6 +67,7 @@
       "comment" : "Package level annotation"
     } ],
     "attributionTexts" : [ "The GNU C Library is free software.  See the file COPYING.LIB for copying conditions, and LICENSES for notices about a few contributions that require these additional notices to be distributed.  License copyright years may be listed using range notation, e.g., 1996-2015, indicating that every year in the range, inclusive, is a copyrightable year that would otherwise be listed individually." ],
+    "builtDate" : "2011-01-29T18:30:22Z",
     "checksums" : [ {
       "algorithm" : "MD5",
       "checksumValue" : "624c1abb3664f4b35547e7c73864ad24"
@@ -76,6 +77,9 @@
     }, {
       "algorithm" : "SHA256",
       "checksumValue" : "11b6d3ee554eedf79299905a98f9b9a04e498210b59f15094c916c91d150efcd"
+    }, {
+      "algorithm" : "BLAKE2b-384",
+      "checksumValue" : "aaabd89c926ab525c242e6621f2f5fa73aa4afe3d9e24aed727faaadd6af38b620bdb623dd2b4788b1c8086984af8706"
     } ],
     "copyrightText" : "Copyright 2008-2010 John Smith",
     "description" : "The GNU C Library defines functions that are specified by the ISO C standard, as well as additional features specific to POSIX and other derivatives of the Unix operating system, and extensions specific to GNU systems.",
@@ -91,7 +95,6 @@
       "referenceType" : "http://spdx.org/spdxdocs/spdx-example-444504E0-4F89-41D3-9A0C-0305E82C3301#LocationRef-acmeforge"
     } ],
     "filesAnalyzed" : true,
-    "hasFiles" : [ "SPDXRef-CommonsLangSrc", "SPDXRef-JenaLib", "SPDXRef-DoapSource" ],
     "homepage" : "http://ftp.gnu.org/gnu/glibc",
     "licenseComments" : "The license for this project changed with the release of version x.y.  The version of the project included here post-dates the license change.",
     "licenseConcluded" : "(LGPL-2.0-only OR LicenseRef-3)",
@@ -104,9 +107,13 @@
       "packageVerificationCodeExcludedFiles" : [ "./package.spdx" ],
       "packageVerificationCodeValue" : "d6a770ba38583ed4bb4525bd96e50461655d2758"
     },
+    "primaryPackagePurpose" : "SOURCE",
+    "hasFiles" : [ "SPDXRef-Specification", "SPDXRef-Specification", "SPDXRef-CommonsLangSrc", "SPDXRef-Specification", "SPDXRef-CommonsLangSrc", "SPDXRef-JenaLib", "SPDXRef-Specification", "SPDXRef-CommonsLangSrc", "SPDXRef-JenaLib", "SPDXRef-DoapSource", "SPDXRef-Specification", "SPDXRef-CommonsLangSrc", "SPDXRef-JenaLib", "SPDXRef-DoapSource" ],
+    "releaseDate" : "2012-01-29T18:30:22Z",
     "sourceInfo" : "uses glibc-2_11-branch from git://sourceware.org/git/glibc.git.",
     "summary" : "GNU C library.",
     "supplier" : "Person: Jane Doe (jane.doe@example.com)",
+    "validUntilDate" : "2014-01-29T18:30:22Z",
     "versionInfo" : "2.11.1"
   }, {
     "SPDXID" : "SPDXRef-fromDoap-1",
@@ -119,17 +126,14 @@
     "name" : "Apache Commons Lang"
   }, {
     "SPDXID" : "SPDXRef-fromDoap-0",
-    "copyrightText" : "NOASSERTION",
     "downloadLocation" : "https://search.maven.org/remotecontent?filepath=org/apache/jena/apache-jena/3.12.0/apache-jena-3.12.0.tar.gz",
     "externalRefs" : [ {
-      "referenceCategory" : "PACKAGE_MANAGER",
+      "referenceCategory" : "PACKAGE-MANAGER",
       "referenceLocator" : "pkg:maven/org.apache.jena/apache-jena@3.12.0",
       "referenceType" : "purl"
     } ],
     "filesAnalyzed" : false,
     "homepage" : "http://www.openjena.org/",
-    "licenseConcluded" : "NOASSERTION",
-    "licenseDeclared" : "NOASSERTION",
     "name" : "Jena",
     "versionInfo" : "3.12.0"
   }, {
@@ -190,6 +194,15 @@
     "licenseComments" : "This license is used by Jena",
     "licenseConcluded" : "LicenseRef-1",
     "licenseInfoInFiles" : [ "LicenseRef-1" ]
+  }, {
+    "SPDXID" : "SPDXRef-Specification",
+    "checksums" : [ {
+      "algorithm" : "SHA1",
+      "checksumValue" : "fff4e1c67a2d28fced849ee1bb76e7391b93f125"
+    } ],
+    "comment" : "Specification Documentation",
+    "fileName" : "./docs/myspec.pdf",
+    "fileTypes" : [ "DOCUMENTATION" ]
   }, {
     "SPDXID" : "SPDXRef-File",
     "annotations" : [ {
@@ -246,39 +259,31 @@
   } ],
   "relationships" : [ {
     "spdxElementId" : "SPDXRef-DOCUMENT",
-    "relatedSpdxElement" : "SPDXRef-Package",
-    "relationshipType" : "CONTAINS"
-  }, {
-    "spdxElementId" : "SPDXRef-DOCUMENT",
-    "relatedSpdxElement" : "DocumentRef-spdx-tool-1.2:SPDXRef-ToolsElement",
-    "relationshipType" : "COPY_OF"
-  }, {
-    "spdxElementId" : "SPDXRef-DOCUMENT",
-    "relatedSpdxElement" : "SPDXRef-File",
-    "relationshipType" : "DESCRIBES"
+    "relationshipType" : "CONTAINS",
+    "relatedSpdxElement" : "SPDXRef-Package"
   }, {
     "spdxElementId" : "SPDXRef-DOCUMENT",
-    "relatedSpdxElement" : "SPDXRef-Package",
-    "relationshipType" : "DESCRIBES"
-  }, {
-    "spdxElementId" : "SPDXRef-Package",
-    "relatedSpdxElement" : "SPDXRef-JenaLib",
-    "relationshipType" : "CONTAINS"
+    "relationshipType" : "COPY_OF",
+    "relatedSpdxElement" : "DocumentRef-spdx-tool-1.2:SPDXRef-ToolsElement"
   }, {
     "spdxElementId" : "SPDXRef-Package",
-    "relatedSpdxElement" : "SPDXRef-Saxon",
-    "relationshipType" : "DYNAMIC_LINK"
+    "relationshipType" : "DYNAMIC_LINK",
+    "relatedSpdxElement" : "SPDXRef-Saxon"
   }, {
     "spdxElementId" : "SPDXRef-CommonsLangSrc",
-    "relatedSpdxElement" : "NOASSERTION",
-    "relationshipType" : "GENERATED_FROM"
+    "relationshipType" : "GENERATED_FROM",
+    "relatedSpdxElement" : "NOASSERTION"
   }, {
     "spdxElementId" : "SPDXRef-JenaLib",
-    "relatedSpdxElement" : "SPDXRef-Package",
-    "relationshipType" : "CONTAINS"
+    "relationshipType" : "CONTAINS",
+    "relatedSpdxElement" : "SPDXRef-Package"
+  }, {
+    "spdxElementId" : "SPDXRef-Specification",
+    "relationshipType" : "SPECIFICATION_FOR",
+    "relatedSpdxElement" : "SPDXRef-fromDoap-0"
   }, {
     "spdxElementId" : "SPDXRef-File",
-    "relatedSpdxElement" : "SPDXRef-fromDoap-0",
-    "relationshipType" : "GENERATED_FROM"
+    "relationshipType" : "GENERATED_FROM",
+    "relatedSpdxElement" : "SPDXRef-fromDoap-0"
   } ]
 }