| CARVIEW |
SPDX 2.2
- IRI:
- https://spdx.org/rdf/terms
- Version IRI:
- https://spdx.org/rdf/terms/2.2
- Current version:
- 2.2
- Other visualisation:
- Ontology source
Abstract
This specification describes the SPDX® language, defined as a dictionary of named properties and classes using W3C's RDF Technology.
SPDX® is a designed to allow the exchange of data about software packages. This information includes general information about the package, licensing information about the package as a whole, a manifest of files contained in the package and licensing information related to the contained files.
Known issues:
Table of Content
Classes
- annotation
- annotation type
- any license info
- byte offset pointer
- checksum
- checksum algorithm
- compound pointer
- conjunctive license set
- creation info
- disjunctive license set
- external document ref
- external ref
- extracted licensing info
- file
- file type
- license
- license exception
- line char pointer
- listed license
- offset pointer
- or later operator
- package
- package verification code
- pointer
- reference category
- reference type
- relationship
- relationship type
- review
- simple licensing info
- single pointer
- snippet
- spdx document
- spdx element
- spdx item
- start end pointer
- with exception operator
annotationc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#Annotation
- has super-classes
- annotation typeop exactly 1 annotation typec
- annotation datedp exactly 1
- commentdp exactly 1
- annotatordp exactly 1
- is in domain of
- annotation datedp, annotation typeop, annotatordp, datedp
- is in range of
- annotationop
- is disjoint with
- relationshipc, spdx elementc
annotation typec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#AnnotationType
This type describes the type of annotation. Annotations are usually created when someone reviews the file, and if this is the case the annotation type should be REVIEW.
- has members
- annotation type otherni, annotation type reviewni
any license infoc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#AnyLicenseInfo
- is defined by
- https://raw.githubusercontent.com/spdx/spdx-spec/updaterdfschema/ontology/spdx-ontology.owl.xml
The AnyLicenseInfo class includes all resources that represent licensing information.
- has sub-classes
- conjunctive license setc, disjunctive license setc, or later operatorc, simple licensing infoc, with exception operatorc
- is in range of
- license declaredop, memberop
byte offset pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#ByteOffsetPointer
- has super-classes
- offset pointerc
- offsetdp exactly 1
checksumc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#Checksum
A Checksum is value that allows the contents of a file to be authenticated. Even small changes to the content of the file will change its checksum. This class allows the results of a variety of checksum and cryptographic message digest algorithms to be represented.
- has super-classes
- checksum valuedp exactly 1
- algorithmop exactly 1 checksum algorithmc
- is in domain of
- algorithmop, checksum valuedp
- is in range of
- checksumop
checksum algorithmc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ChecksumAlgorithm
Algorighm for Checksums.
compound pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#CompoundPointer
- has super-classes
- pointerc
- has sub-classes
- start end pointerc
- is in domain of
- end pointerop, start pointerop
- is in range of
- rangeop
conjunctive license setc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ConjunctiveLicenseSet
A ConjunctiveLicenseSet represents a set of licensing information all of which apply.
- has super-classes
- any license infoc
- containerc
- memberop min 2 any license infoc
creation infoc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#CreationInfo
One instance is required for each SPDX file produced. It provides the necessary information for forward and backward compatibility for processing tools.
- has super-classes
- creatordp min 1
- commentdp max 1
- createddp exactly 1
- license list versiondp max 1
- is in domain of
- createddp, creatordp, datedp, license list versiondp
- is in range of
- creation infoop
disjunctive license setc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#DisjunctiveLicenseSet
A DisjunctiveLicenseSet represents a set of licensing information where only one license applies at a time. This class implies that the recipient gets to choose one of these licenses they would prefer to use.
- has super-classes
- any license infoc
- containerc
- memberop min 2 any license infoc
external document refc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ExternalDocumentRef
Information about an external SPDX document reference including the checksum. This allows for verification of the external references.
- has super-classes
- spdx documentop exactly 1 spdx documentc
- external document iddp exactly 1
- checksumop exactly 1 checksumc
- is in domain of
- external document iddp, spdx documentop
external refc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ExternalRef
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package.
- has super-classes
- commentdp max 1
- reference locatordp exactly 1
- reference categoryop exactly 1 reference categoryc
- reference typeop exactly 1 reference typec
- is in domain of
- reference categoryop, reference locatordp, reference typeop
- is in range of
- external refop
extracted licensing infoc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ExtractedLicensingInfo
An ExtractedLicensingInfo represents a license or licensing notice that was found in the package. Any license text that is recognized as a license may be represented as a License rather than an ExtractedLicensingInfo.
- has super-classes
- simple licensing infoc
- extracted textdp exactly 1
- is in domain of
- extracted textdp, has extracted licensing infoop
filec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#File
A File represents a named sequence of information that is contained in a software package.
- has super-classes
- spdx itemc
- checksumop min 1 checksumc
- notice textdp max 1
- file namedp exactly 1
- file dependencyop min 0 filec
- file contributordp min 0
- file typeop min 0 file typec
- artifact ofop min 0 projectc
- license info in fileop min 1 any license infoc
- is in domain of
- file contributordp, file dependencyop, file namedp, file typeop, license info in fileop, notice textdp
- is in range of
- file dependencyop, has fileop, references fileop, snippet from fileop
- is disjoint with
- snippetc
file typec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#FileType
Type of file.
- has members
- file type applicationni, file type archiveni, file type audioni, file type binaryni, file type documentationni, file type imageni, file type otherni, file type sourceni, file type spdxni, file type textni, file type videoni
licensec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#License
A License represents a copyright license. The SPDX license list website is annotated with these properties (using RDFa) to allow license data published there to be easily processed. The license list is populated in accordance with the License List fields guidelines. These guidelines are not normative and may change over time. SPDX tooling should not rely on values in the license list conforming to the current guidelines.
- has super-classes
- simple licensing infoc
- is fsf libredp max 1
- standard license header templatedp max 1
- license textdp exactly 1
- is deprecated license iddp max 1
- standard license headerdp max 1
- standard license templatedp max 1
- is osi approveddp exactly 1
- has sub-classes
- listed licensec
- is in domain of
- is fsf libredp, is osi approveddp, license textdp, standard license headerdp, standard license templatedp
license exceptionc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#LicenseException
An exception to a license.
- has super-classes
- exampledp max 1
- see alsodp min 0
- commentdp exactly 1
- license exception textdp exactly 1
- namedp exactly 1
- license exception iddp exactly 1
- is in domain of
- exampledp, license exception iddp, license exception textdp
- is in range of
- license exceptionop
line char pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#LineCharPointer
- has super-classes
- offset pointerc
- line numberdp exactly 1
- is in domain of
- line numberdp
listed licensec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ListedLicense
A license which is included in the SPDX License List (https://spdx.org/licenses).
- has super-classes
- licensec
- is deprecated license iddp max 1
- is in domain of
- is deprecated license iddp, standard license header templatedp
offset pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#OffsetPointer
- has super-classes
- single pointerc
- has sub-classes
- byte offset pointerc, line char pointerc
- is in domain of
- offsetdp
or later operatorc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#OrLaterOperator
A license with an or later operator indicating this license version or any later version of the license
- has super-classes
- any license infoc
- memberop exactly 1 simple licensing infoc
packagec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#Package
A Package represents a collection of software files that are delivered as a single functional component.
- has super-classes
- spdx itemc
- descriptiondp max 1
- homepagedp max 1
- package verification codeop max 1 package verification codec
- package file namedp max 1
- checksumop min 0 checksumc
- external refop min 0 external refc
- supplierdp max 1
- has fileop min 0 filec
- originatordp max 1
- files analyzeddp max 1
- version infodp max 1
- download locationdp exactly 1
- source infodp max 1
- summarydp max 1
- (license declaredop value noassertion) or (license declaredop value none) or (license declaredop exactly 1 any license infoc)
- is in domain of
- descriptiondp, download locationdp, external refop, files analyzeddp, has fileop, homepagedp, license info from filesop, originatordp, package file namedp, package namedp, package verification codeop, source infodp, summarydp, supplierdp, version infodp
- is in range of
- describes packageop
package verification codec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#PackageVerificationCode
A manifest based verification code (the algorithm is defined in section 4.7 of the full specification) of the SPDX Item. This allows consumers of this data and/or database to determine if an SPDX item they have in hand is identical to the SPDX item from which the data was produced. This algorithm works even if the SPDX document is included in the SPDX item.
- has super-classes
- package verification code excluded filedp min 0
- package verification code valuedp exactly 1
- is in domain of
- package verification code excluded filedp, package verification code valuedp
- is in range of
- package verification codeop
pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#Pointer
- has sub-classes
- compound pointerc, single pointerc
reference categoryc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ReferenceCategory
Category used for ExternalRef
reference typec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#ReferenceType
Types used to external reference identifiers.
- has super-classes
- contextual exampledp exactly 1
- documentationdp exactly 1
- external reference sitedp exactly 1
- is in domain of
- contextual exampledp, documentationdp, external reference sitedp
- is in range of
- reference typeop
relationshipc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#Relationship
A Relationship represents a relationship between two SpdxElements.
- has super-classes
- commentdp max 1
- related spdx elementop exactly 1 spdx elementc
- relationship typeop exactly 1 relationship typec
- is in domain of
- related spdx elementop, relationship typeop
- is in range of
- relationshipop
- is disjoint with
- annotationc, spdx elementc
relationship typec back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#RelationshipType
Type of relationship.
- has members
- relationship type amendmentni, relationship type ancestor ofni, relationship type build dependency ofni, relationship type build tool ofni, relationship type contained byni, relationship type containsni, relationship type copy ofni, relationship type data fileni, relationship type data file ofni, relationship type dependency manifest ofni, relationship type dependency ofni, relationship type depends onni, relationship type descendant ofni, relationship type described byni, relationship type describesni, relationship type dev dependency ofni, relationship type dev tool ofni, relationship type distribution artifactni, relationship type documentationni, relationship type dynamic linkni, relationship type example ofni, relationship type expanded from archiveni, relationship type file addedni, relationship type file deletedni, relationship type file modifiedni, relationship type generated fromni, relationship type generatesni, relationship type has prerequisiteni, relationship type metafile ofni, relationship type optional component ofni, relationship type optional dependency ofni, relationship type otherni, relationship type package ofni, relationship type patch appliedni, relationship type patch forni, relationship type prerequisite forni, relationship type provided dependency ofni, relationship type runtime dependency ofni, relationship type static linkni, relationship type test dependency ofni, relationship type test ofni, relationship type test tool ofni, relationship type testcase ofni, relationship type variant ofni
reviewc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#Review
- has super-classes
- review datedp exactly 1
- commentdp max 1
- reviewerdp max 1
- is in domain of
- review datedp, reviewerdp
- is in range of
- reviewedop
simple licensing infoc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#SimpleLicensingInfo
The SimpleLicenseInfo class includes all resources that represent simple, atomic, licensing information.
- has super-classes
- any license infoc
- license iddp exactly 1
- see alsodp min 0
- commentdp max 1
- namedp exactly 1
- has sub-classes
- extracted licensing infoc, licensec
- is in domain of
- license iddp
single pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#SinglePointer
- has super-classes
- pointerc
- referenceop exactly 1 filec
- has sub-classes
- offset pointerc
- is in domain of
- referenceop
- is in range of
- end pointerop, start pointerop
snippetc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#Snippet
The set of bytes in a file. The name of the snippet is the name of the file appended with the byte range in parenthesis (ie: "./file/name(2145:5532)")
- has super-classes
- spdx itemc
- snippet from fileop exactly 1 filec
- rangeop min 1 start end pointerc
- license info in snippetop min 0 any license infoc
- is in domain of
- license info in snippetop, rangeop, snippet from fileop, snippet namedp
- is disjoint with
- filec
spdx documentc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#SpdxDocument
An SpdxDocument is a summary of the contents, provenance, ownership and licensing analysis of a specific software package. This is, effectively, the top level of SPDX information.
- has super-classes
- spdx elementc
- external document refop min 0 external document refc
- has extracted licensing infoop min 0 extracted licensing infoc
- spec versiondp exactly 1
- data licenseop value c c0 1.0
- data licenseop exactly 1 any license infoc
- creation infoop exactly 1 creation infoc
- describes packageop min 0 packagec
- reviewedop min 0 reviewc
- is in domain of
- creation infoop, data licenseop, describes packageop, external document refop, has extracted licensing infoop, references fileop, reviewedop, spec versiondp
- is in range of
- spdx documentop
spdx elementc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#SpdxElement
An SpdxElement is any thing described in SPDX, either a document or an SpdxItem. SpdxElements can be related to other SpdxElements.
- has super-classes
- relationshipop min 0 relationshipc
- namedp exactly 1
- commentdp max 1
- annotationop min 0 annotationc
- has sub-classes
- spdx documentc, spdx itemc
- is in domain of
- annotationop, artifact ofop, namedp, relationshipop
- is in range of
- related spdx elementop
- is disjoint with
- annotationc, relationshipc
spdx itemc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#SpdxItem
An SpdxItem is a potentially copyrightable work.
- has super-classes
- spdx elementc
- attribution textdp min 0
- license info from filesop min 0 simple licensing infoc
- copyright textdp exactly 1
- (license concludedop value noassertion) or (license concludedop value none) or (license concludedop exactly 1 any license infoc)
- license commentsdp max 1
- has sub-classes
- filec, packagec, snippetc
- is in domain of
- attribution textdp, copyright textdp, license commentsdp, license concludedop, license declaredop
start end pointerc back to ToC or Class ToC
IRI: https://www.w3.org/2009/pointers#StartEndPointer
- has super-classes
- compound pointerc
- end pointerop exactly 1 single pointerc
- start pointerop exactly 1 single pointerc
with exception operatorc back to ToC or Class ToC
IRI: https://spdx.org/rdf/terms#WithExceptionOperator
Sometimes a set of license terms apply except under special circumstances. In this case, use the binary "WITH" operator to construct a new license expression to represent the special exception situation. A valid
- has super-classes
- any license infoc
- license exceptionop exactly 1 license exceptionc
- memberop exactly 1 simple licensing infoc
- is in domain of
- license exceptionop
Object Properties
- algorithm
- annotation
- annotation type
- artifact of
- checksum
- creation info
- data license
- describes package
- end pointer
- external document ref
- external ref
- file dependency
- file type
- has extracted licensing info
- has file
- license concluded
- license declared
- license exception
- license info from files
- license info in file
- license info in snippet
- member
- package verification code
- range
- reference
- reference category
- reference type
- references file
- related spdx element
- relationship
- relationship type
- reviewed
- snippet from file
- spdx document
- start pointer
algorithmop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#algorithm
Identifies the algorithm used to produce the subject Checksum. Currently, SHA-1 is the only supported algorithm. It is anticipated that other algorithms will be supported at a later time.
- has domain
- checksumc
- has range
- (algorithmop value checksum algorithm md5) or (algorithmop value checksum algorithm sha1) or (algorithmop value checksum algorithm sha256)
annotationop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#annotation
Provide additional information about an SpdxElement.
- has domain
- spdx elementc
- has range
- annotationc
annotation typeop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#annotationType
Type of the annotation.
- has domain
- annotationc
- has range
- (annotation typeop value annotation type other) or (annotation typeop value annotation type review)
artifact ofop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#artifactOf
Indicates the project in which the SpdxElement originated. Tools must preserve doap:homepage and doap:name properties and the URI (if one is known) of doap:Project resources that are values of this property. All other properties of doap:Projects are not directly supported by SPDX and may be dropped when translating to or from some SPDX formats.
- has domain
- spdx elementc
- has range
- projectc
checksumop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#checksum
The checksum property provides a mechanism that can be used to verify that the contents of a File or Package have not changed.
creation infoop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#creationInfo
The creationInfo property relates an SpdxDocument to a set of information about the creation of the SpdxDocument.
- has domain
- spdx documentc
- has range
- creation infoc
data licenseop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#dataLicense
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata"). The SPDX specification contains numerous fields where an SPDX document creator may provide relevant explanatory text in SPDX-Metadata. Without opining on the lawfulness of "database rights" (in jurisdictions where applicable), such explanatory text is copyrightable subject matter in most Berne Convention countries. By using the SPDX specification, or any portion hereof, you hereby agree that any copyright rights (as determined by your jurisdiction) in any SPDX-Metadata, including without limitation explanatory text, shall be subject to the terms of the Creative Commons CC0 1.0 Universal license. For SPDX-Metadata not containing any copyright rights, you hereby agree and acknowledge that the SPDX-Metadata is provided to you "as-is" and without any representations or warranties of any kind concerning the SPDX-Metadata, express, implied, statutory or otherwise, including without limitation warranties of title, merchantability, fitness for a particular purpose, non-infringement, or the absence of latent or other defects, accuracy, or the presence or absence of errors, whether or not discoverable, all to the greatest extent permissible under applicable law.
has characteristics: functional
- has domain
- spdx documentc
- has range
- data licenseop value c c0 1.0
describes packageop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#describesPackage
The describesPackage property relates an SpdxDocument to the package which it describes.
- has domain
- spdx documentc
- has range
- packagec
end pointerop back to ToC or Object Property ToC
IRI: https://www.w3.org/2009/pointers#endPointer
- has domain
- compound pointerc
- has range
- single pointerc
external document refop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#externalDocumentRef
Identify any external SPDX documents referenced within this SPDX document.
- has domain
- spdx documentc
external refop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#externalRef
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package.
- has domain
- packagec
- has range
- external refc
file typeop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#fileType
The type of the file.
- has domain
- filec
- has range
- (file typeop value file type archive) or (file typeop value file type binary) or (file typeop value file type other) or (file typeop value file type source)
has extracted licensing infoop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#hasExtractedLicensingInfo
Indicates that a particular ExtractedLicensingInfo was defined in the subject SpdxDocument.
- has domain
- extracted licensing infoc
- spdx documentc
has fileop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#hasFile
Indicates that a particular file belongs to a package.
license concludedop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#licenseConcluded
The licensing that the preparer of this SPDX document has concluded, based on the evidence, actually applies to the package.
has characteristics: functional
- has domain
- spdx itemc
- has range
- any license infoc or (license concludedop value noassertion) or (license concludedop value none)
license declaredop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#licenseDeclared
The licensing that the creators of the software in the package, or the packager, have declared. Declarations by the original software creator should be preferred, if they exist.
- has domain
- spdx itemc
- has range
- any license infoc
license exceptionop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#licenseException
An exception to a license.
- has domain
- with exception operatorc
- has range
- license exceptionc
license info from filesop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#licenseInfoFromFiles
The licensing information that was discovered directly within the package. There will be an instance of this property for each distinct value of alllicenseInfoInFile properties of all files contained in the package.
- has sub-properties
- license info in fileop, license info in snippetop
- has domain
- packagec
- has range
- simple licensing infoc or (license info from filesop value noassertion) or (license info from filesop value none)
license info in fileop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#licenseInfoInFile
Licensing information that was discovered directly in the subject file. This is also considered a declared license for the file.
- has super-properties
- license info from filesop
- has domain
- filec
- has range
- simple licensing infoc or (license info in fileop value noassertion) or (license info in fileop value none)
license info in snippetop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#licenseInfoInSnippet
Licensing information that was discovered directly in the subject snippet. This is also considered a declared license for the snippet.
- has super-properties
- license info from filesop
- has domain
- snippetc
- has range
- simple licensing infoc or (license info in fileop value noassertion) or (license info in fileop value none)
memberop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#member
A license, or other licensing information, that is a member of the subject license set.
- has domain
- conjunctive license setc or disjunctive license setc or with exception operatorc
- has range
- any license infoc
package verification codeop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#packageVerificationCode
A manifest based verification code (the algorithm is defined in section 3.9.4 of the full specification) of the package. This allows consumers of this data and/or database to determine if a package they have in hand is identical to the package from which the data was produced. This algorithm works even if the SPDX document is included in the package.
- has domain
- packagec
- has range
- package verification codec
rangeop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#range
This field defines the byte range in the original host file (in X.2) that the snippet information applies to
- has domain
- snippetc
- has range
- compound pointerc
referenceop back to ToC or Object Property ToC
IRI: https://www.w3.org/2009/pointers#reference
- has domain
- single pointerc
reference categoryop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#referenceCategory
Category for the external reference
- has domain
- external refc
- has range
- (reference categoryop value reference category other) or (reference categoryop value reference category package manager) or (reference categoryop value reference category security)
reference typeop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#referenceType
Type of the external reference. These are definined in an appendix in the SPDX specification.
- has domain
- external refc
- has range
- reference typec
references fileop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#referencesFile
Indicates that a particular file belongs as part of the set of analyzed files in the SpdxDocument.
- has domain
- spdx documentc
- has range
- filec
related spdx elementop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#relatedSpdxElement
A related SpdxElement.
- has domain
- relationshipc
- has range
- spdx elementc
relationshipop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#relationship
Defines a relationship between two SPDX elements. The SPDX element may be a Package, File, or SpdxDocument.
- has domain
- spdx elementc
- has range
- relationshipc
relationship typeop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#relationshipType
Describes the type of relationship between two SPDX elements.
- has domain
- relationshipc
- has range
- (relationship typeop value relationship type amendment) or (relationship typeop value relationship type ancestor of) or (relationship typeop value relationship type build tool of) or (relationship typeop value relationship type contained by) or (relationship typeop value relationship type contains) or (relationship typeop value relationship type copy of) or (relationship typeop value relationship type data file) or (relationship typeop value relationship type data file of) or (relationship typeop value relationship type descendant of) or (relationship typeop value relationship type described by) or (relationship typeop value relationship type describes) or (relationship typeop value relationship type distribution artifact) or (relationship typeop value relationship type documentation) or (relationship typeop value relationship type dynamic link) or (relationship typeop value relationship type expanded from archive) or (relationship typeop value relationship type file added) or (relationship typeop value relationship type file deleted) or (relationship typeop value relationship type file modified) or (relationship typeop value relationship type generated from) or (relationship typeop value relationship type generates) or (relationship typeop value relationship type has prerequisite) or (relationship typeop value relationship type metafile of) or (relationship typeop value relationship type optional component of) or (relationship typeop value relationship type other) or (relationship typeop value relationship type package of) or (relationship typeop value relationship type patch applied) or (relationship typeop value relationship type patch for) or (relationship typeop value relationship type prerequisite for) or (relationship typeop value relationship type static link) or (relationship typeop value relationship type testcase of) or (relationship typeop value relationship type variant of)
reviewedop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#reviewed
Reviewed
- has domain
- spdx documentc
- has range
- reviewc
- is also defined as
- named individual
snippet from fileop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#snippetFromFile
File containing the SPDX element (e.g. the file contaning a snippet).
spdx documentop back to ToC or Object Property ToC
IRI: https://spdx.org/rdf/terms#spdxDocument
A propoerty containing an SPDX document.
- has domain
- external document refc
- has range
- spdx documentc
start pointerop back to ToC or Object Property ToC
IRI: https://www.w3.org/2009/pointers#startPointer
- has domain
- compound pointerc
- has range
- single pointerc
Data Properties
- annotation date
- annotator
- attribution text
- checksum value
- comment
- contextual example
- copyright text
- created
- creator
- date
- description
- documentation
- download location
- example
- external document id
- external reference site
- extracted text
- file contributor
- file name
- files analyzed
- homepage
- is deprecated license id
- is fsf libre
- is osi approved
- license comments
- license exception id
- license exception text
- license id
- license list version
- license text
- line number
- name
- notice text
- offset
- originator
- package file name
- package name
- package verification code excluded file
- package verification code value
- reference locator
- review date
- reviewer
- snippet name
- source info
- spec version
- standard license header
- standard license header template
- standard license template
- summary
- supplier
- version info
annotation datedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#annotationDate
Identify when the comment was made. This is to be specified according to the combined date and time in the UTC format, as specified in the ISO 8601 standard.
- has super-properties
- datedp
- has domain
- annotationc
- has range
- date time
annotatordp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#annotator
This field identifies the person, organization or tool that has commented on a file, package, or the entire document.
- has domain
- annotationc
- has range
- string
- is also defined as
- named individual
attribution textdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#attributionText
This field provides a place for the SPDX data creator to record acknowledgements that may be required to be communicated in some contexts. This is not meant to include theactual complete license text (see licenseConculded and licenseDeclared), and may or may not include copyright notices (see also copyrightText). The SPDX data creator may use this field to record other acknowledgements, such as particular clauses from license texts, which may be necessary or desirable to reproduce.
- has domain
- spdx itemc
- has range
- string
checksum valuedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#checksumValue
The checksumValue property provides a lower case hexidecimal encoded digest value produced using a specific algorithm.
has characteristics: functional
- has domain
- checksumc
- has range
- hex binary
commentdp back to ToC or Data Property ToC
IRI: https://www.w3.org/2000/01/rdf-schema#comment
- has range
- string
- is also defined as
- annotation property
contextual exampledp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#contextualExample
Example for use of the external repository identifier
- has domain
- reference typec
- has range
- string
copyright textdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#copyrightText
The text of copyright declarations recited in the Package or File.
- has domain
- spdx itemc
- has range
- literal
- string
createddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#created
Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard. This field is distinct from the fields in section 8, which involves the addition of information during a subsequent review.
- has super-properties
- datedp
- has domain
- creation infoc
- has range
- date time
creatordp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#creator
Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name. If the SPDX file was created on behalf of a company or organization, indicate the entity name. If the SPDX file was created using a software tool, indicate the name and version for that tool. If multiple participants or tools were involved, use multiple instances of this field. Person name or organization name may be designated as “anonymous” if appropriate.
- has domain
- creation infoc
- has range
- string
datedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#date
A date-time stamp.
- has sub-properties
- annotation datedp, createddp
- has domain
- annotationc
- creation infoc
- has range
- date time
descriptiondp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#description
Provides a detailed description of the package.
- has domain
- packagec
- has range
- string
documentationdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#documentation
Website containing the documentation related to the repository identifier
- has domain
- reference typec
- has range
- any u r i
download locationdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#downloadLocation
The URI at which this package is available for download. Private (i.e., not publicly reachable) URIs are acceptable as values of this property. The values https://spdx.org/rdf/terms#none and https://spdx.org/rdf/terms#noassertion may be used to specify that the package is not downloadable or that no attempt was made to determine its download location, respectively.
- has domain
- packagec
- has range
- any u r i
exampledp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#example
Text for examples in describing an SPDX element.
- has domain
- license exceptionc
- has range
- string
external document iddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#externalDocumentId
externalDocumentId is a string containing letters, numbers, ., - and/or + which uniquely identifies an external document within this document.
- has domain
- external document refc
- has range
- string
external reference sitedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#externalReferenceSite
Website for the maintainers of the external reference site
- has domain
- reference typec
- has range
- any u r i
extracted textdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#extractedText
Verbatim license or licensing notice text that was discovered.
- has domain
- extracted licensing infoc
- has range
- string
file contributordp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#fileContributor
This field provides a place for the SPDX file creator to record file contributors. Contributors could include names of copyright holders and/or authors who may not be copyright holders yet contributed to the file content.
- has domain
- filec
- has range
- string
file namedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#fileName
The name of the file relative to the root of the package.
files analyzeddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#filesAnalyzed
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document. If false indicates packages that represent metadata or URI references to a project, product, artifact, distribution or a component. If set to false, the package must not contain any files.
- has domain
- packagec
- has range
- boolean
homepagedp back to ToC or Data Property ToC
IRI: https://usefulinc.com/ns/doap#homepage
- has domain
- packagec
- has range
- any u r i
is deprecated license iddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#isDeprecatedLicenseId
- has domain
- listed licensec
- has range
- boolean
is fsf libredp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#isFsfLibre
- has domain
- licensec
- has range
- boolean
is osi approveddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#isOsiApproved
Indicates if the OSI has approved the license.
- has domain
- licensec
- has range
- boolean
license commentsdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#licenseComments
The licenseComments property allows the preparer of the SPDX document to describe why the licensing in spdx:licenseConcluded was chosen.
- has domain
- spdx itemc
- has range
- string
license exception iddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#licenseExceptionId
Short form license exception identifier in Appendix I.2 of the SPDX specification.
- has domain
- license exceptionc
- has range
- string
license exception textdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#licenseExceptionText
Full text of the license exception.
- has domain
- license exceptionc
- has range
- string
license iddp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#licenseId
A human readable short form license identifier for a license. The license ID is iether on the standard license oist or the form "LicenseRef-"[idString] where [idString] is a unique string containing letters, numbers, ".", "-" or "+".
- has domain
- simple licensing infoc
- has range
- string
license list versiondp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#licenseListVersion
An optional field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created.
has characteristics: functional
- has domain
- creation infoc
- has range
- string
license textdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#licenseText
Full text of the license.
- has domain
- licensec
- has range
- string
line numberdp back to ToC or Data Property ToC
IRI: https://www.w3.org/2009/pointers#lineNumber
- has domain
- line char pointerc
- has range
- positive integer
namedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#name
Identify name of this SpdxElement.
- has sub-properties
- file namedp, package namedp, snippet namedp
- has domain
- spdx elementc
- has range
- string
notice textdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#noticeText
This field provides a place for the SPDX file creator to record potential legal notices found in the file. This may or may not include copyright statements.
- has domain
- filec
- has range
- string
offsetdp back to ToC or Data Property ToC
IRI: https://www.w3.org/2009/pointers#offset
- has domain
- offset pointerc
- has range
- positive integer
originatordp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#originator
The name and, optionally, contact information of the person or organization that originally created the package. Values of this property must conform to the agent and tool syntax.
- has domain
- packagec
- has range
- string
package file namedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#packageFileName
The base name of the package file name. For example, zlib-1.2.5.tar.gz.
- has domain
- packagec
- has range
- string
package namedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#packageName
Identify the full name of the package as given by Package Originator.
package verification code excluded filedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#packageVerificationCodeExcludedFile
A file that was excluded when calculating the package verification code. This is usually a file containing SPDX data regarding the package. If a package contains more than one SPDX file all SPDX files must be excluded from the package verification code. If this is not done it would be impossible to correctly calculate the verification codes in both files.
- has domain
- package verification codec
- has range
- string
package verification code valuedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#packageVerificationCodeValue
The actual package verification code as a hex encoded value.
- has domain
- package verification codec
- has range
- hex binary
reference locatordp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#referenceLocator
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location. The format of the locator is subject to constraints defined by the
- has domain
- external refc
- has range
- string
review datedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#reviewDate
The date and time at which the SpdxDocument was reviewed. This value must be in UTC and have 'Z' as its timezone indicator.
- has domain
- reviewc
- has range
- date time
reviewerdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#reviewer
The name and, optionally, contact information of the person who performed the review. Values of this property must conform to the agent and tool syntax.
- has domain
- reviewc
- has range
- string
snippet namedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#snippetName
Identify a specific snippet in a human convenient manner.
source infodp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#sourceInfo
Allows the producer(s) of the SPDX document to describe how the package was acquired and/or changed from the original source.
- has domain
- packagec
- has range
- string
spec versiondp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#specVersion
Provide a reference number that can be used to understand how to parse and interpret the rest of the file. It will enable both future changes to the specification and to support backward compatibility. The version number consists of a major and minor version indicator. The major field will be incremented when incompatible changes between versions are made (one or more sections are created, modified or deleted). The minor field will be incremented when backwards compatible changes are made.
- has domain
- spdx documentc
- has range
- string
standard license headerdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#standardLicenseHeader
License author's preferred text to indicated that a file is covered by the license.
- has domain
- licensec
- has range
- string
standard license header templatedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#standardLicenseHeaderTemplate
License template which describes sections of the license header which can be varied. See License Template section of the specification for format information.
- has domain
- listed licensec
- has range
- string
standard license templatedp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#standardLicenseTemplate
License template which describes sections of the license which can be varied. See License Template section of the specification for format information.
- has domain
- licensec
- has range
- string
summarydp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#summary
Provides a short description of the package.
- has domain
- packagec
- has range
- string
supplierdp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#supplier
The name and, optionally, contact information of the person or organization who was the immediate supplier of this package to the recipient. The supplier may be different than originator when the software has been repackaged. Values of this property must conform to the agent and tool syntax.
- has domain
- packagec
- has range
- string
version infodp back to ToC or Data Property ToC
IRI: https://spdx.org/rdf/terms#versionInfo
Provides an indication of the version of the package that is described by this SpdxDocument.
- has domain
- packagec
- has range
- string
Named Individuals
- annotation type other
- annotation type review
- annotator
- checksum algorithm md2
- checksum algorithm md4
- checksum algorithm md5
- checksum algorithm md6
- checksum algorithm sha1
- checksum algorithm sha224
- checksum algorithm sha256
- checksum algorithm sha384
- checksum algorithm sha512
- file type application
- file type archive
- file type audio
- file type binary
- file type documentation
- file type image
- file type other
- file type source
- file type spdx
- file type text
- file type video
- noassertion
- none
- reference category other
- reference category package manager
- reference category persistent id
- reference category security
- relationship type amendment
- relationship type ancestor of
- relationship type build dependency of
- relationship type build tool of
- relationship type contained by
- relationship type contains
- relationship type copy of
- relationship type data file
- relationship type data file of
- relationship type dependency manifest of
- relationship type dependency of
- relationship type depends on
- relationship type descendant of
- relationship type described by
- relationship type describes
- relationship type dev dependency of
- relationship type dev tool of
- relationship type distribution artifact
- relationship type documentation
- relationship type dynamic link
- relationship type example of
- relationship type expanded from archive
- relationship type file added
- relationship type file deleted
- relationship type file modified
- relationship type generated from
- relationship type generates
- relationship type has prerequisite
- relationship type metafile of
- relationship type optional component of
- relationship type optional dependency of
- relationship type other
- relationship type package of
- relationship type patch applied
- relationship type patch for
- relationship type prerequisite for
- relationship type provided dependency of
- relationship type runtime dependency of
- relationship type static link
- relationship type test dependency of
- relationship type test of
- relationship type test tool of
- relationship type testcase of
- relationship type variant of
- reviewed
annotation type otherni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#annotationType_other
Type of annotation which does not fit in any of the pre-defined annotation types.
- belongs to
- annotation typec
- has facts
- commentdp "Type of annotation which does not fit in any of the pre-defined annotation types."@en
annotation type reviewni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#annotationType_review
A Review represents an audit and signoff by an individual, organization or tool on the information for an SpdxElement.
- belongs to
- annotation typec
- has facts
- commentdp "A Review represents an audit and signoff by an individual, organization or tool on the information for an SpdxElement."@en
annotatorni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#annotator
This field identifies the person, organization or tool that has commented on a file, package, or the entire document.
- has facts
- commentdp "This field identifies the person, organization or tool that has commented on a file, package, or the entire document."
- is also defined as
- data property
checksum algorithm md2ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_md2
Indicates the algorithm used was MD2
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was MD2"
checksum algorithm md4ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_md4
Indicates the algorithm used was MD4
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was MD4"
checksum algorithm md5ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_md5
Indicates the algorithm used was MD5
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was MD5"@en
checksum algorithm md6ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_md6
Indicates the algorithm used was MD6
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was MD6"@en
checksum algorithm sha1ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_sha1
Indicates the algorithm used was SHA-1
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was SHA-1"
checksum algorithm sha224ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_sha224
Indicates the algorithm used was SHA224
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was SHA224"@en
checksum algorithm sha256ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_sha256
Indicates the algorithm used was SHA256
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was SHA256"@en
checksum algorithm sha384ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_sha384
Indicates the algorithm used was SHA384
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was SHA384"@en
checksum algorithm sha512ni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#checksumAlgorithm_sha512
Indicates the algorithm used was SHA512
- belongs to
- checksum algorithmc
- has facts
- commentdp "Indicates the algorithm used was SHA512"@en
file type applicationni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_application
The file is associated with a specific application type (MIME type of application/* )
file type archiveni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_archive
Indicates the file is an archive file.
file type audioni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_audio
The file is associated with an audio file (MIME type of audio/ , ie. .mp3 ); IMAGE if the file is assoicated with an picture image file (MIME type of image/, ie. .jpg, .gif )
file type binaryni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_binary
Indicates the file is not a text file. spdx:filetype_archive is preferred for archive files even though they are binary.
file type documentationni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_documentation
The file serves as documentation.
file type imageni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_image
The file is assoicated with an picture image file (MIME type of image/*, ie. .jpg, .gif ).
file type otherni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_other
Indicates the file is not a source, archive or binary file.
file type sourceni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_source
Indicates the file is a source code file.
file type spdxni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_spdx
The file is an SPDX document.
file type textni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_text
The file is human readable text file (MIME type of text/*).
file type videoni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#fileType_video
The file is associated with a video file type (MIME type of video/*).
noassertionni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#noassertion
Individual to indiate the creator of the SPDX document does not assert any value for the object.
- has facts
- commentdp "Individual to indiate the creator of the SPDX document does not assert any value for the object."
noneni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#none
Individual to indicate that no value is applicable for the Object.
- has facts
- commentdp "Individual to indicate that no value is applicable for the Object."
reference category otherni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#referenceCategory_other
- belongs to
- reference categoryc
reference category package managerni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#referenceCategory_packageManager
- belongs to
- reference categoryc
reference category persistent idni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#referenceCategory_persistentId
These point to objects present in the Software Heritage archive by the means of persistent identifiers that are guaranteed to remain stable (persistent) over time.
- belongs to
- reference categoryc
- has facts
- commentdp "These point to objects present in the Software Heritage archive by the means of persistent identifiers that are guaranteed to remain stable (persistent) over time."@en
reference category securityni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#referenceCategory_security
- belongs to
- reference categoryc
relationship type amendmentni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_amendment
To be used when SPDXRef-A amends the SPDX information in SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "To be used when SPDXRef-A amends the SPDX information in SPDXRef-B."@en
relationship type ancestor ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_ancestorOf
A Relationship of relationshipType_ancestorOf expresses that an SPDXElement is an ancestor of (same lineage but pre-dates) the relatedSPDXElement. For example, an upstream File is an ancestor of a modified downstream File
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_ancestorOf expresses that an SPDXElement is an ancestor of (same lineage but pre-dates) the relatedSPDXElement. For example, an upstream File is an ancestor of a modified downstream File"@en
relationship type build dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_buildDependencyOf
Is to be used when SPDXRef-A is a build dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a build dependency of SPDXRef-B."@en
relationship type build tool ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_buildToolOf
To be used when SPDXRef-A is used to to build SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "To be used when SPDXRef-A is used to to build SPDXRef-B."@en
relationship type contained byni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_containedBy
A Relationship of relationshipType_containedBy expresses that an SPDXElement is contained by the relatedSPDXElement. For example, a File contained by a Package.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_containedBy expresses that an SPDXElement is contained by the relatedSPDXElement. For example, a File contained by a Package. "@en
relationship type containsni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_contains
A Relationship of relationshipType_contains expresses that an SPDXElement contains the relatedSPDXElement. For example, a Package contains a File. (relationshipType_contains introduced in SPDX 2.0 deprecates property 'hasFile' from SPDX 1.2)
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_contains expresses that an SPDXElement contains the relatedSPDXElement. For example, a Package contains a File. (relationshipType_contains introduced in SPDX 2.0 deprecates property 'hasFile' from SPDX 1.2)"@en
relationship type copy ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_copyOf
A Relationship of relationshipType_copyOf expresses that the SPDXElement is an exact copy of the relatedSDPXElement. For example, a downstream distribution of a binary library which was copied from the upstream package.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_copyOf expresses that the SPDXElement is an exact copy of the relatedSDPXElement. For example, a downstream distribution of a binary library which was copied from the upstream package."@en
relationship type data fileni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_dataFile
Is to be used when SPDXRef-A is a data file used in SPDXRef-B. Replaced by relationshipType_dataFileOf
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a data file used in SPDXRef-B. Replaced by relationshipType_dataFileOf"@en
relationship type data file ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_dataFileOf
Is to be used when SPDXRef-A is a data file used in SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a data file used in SPDXRef-B."@en
relationship type dependency manifest ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_dependencyManifestOf
Is to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B."@en
relationship type dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_dependencyOf
Is to be used when SPDXRef-A is dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is dependency of SPDXRef-B."@en
relationship type depends onni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_dependsOn
Is to be used when SPDXRef-A depends on SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A depends on SPDXRef-B."@en
relationship type descendant ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_descendantOf
A Relationship of relationshipType_descendantOf expresses that an SPDXElement is a descendant of (same lineage but post-dates) the relatedSPDXElement. For example, an downstream File that was modified is a descendant of an upstream File
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_descendantOf expresses that an SPDXElement is a descendant of (same lineage but post-dates) the relatedSPDXElement. For example, an downstream File that was modified is a descendant of an upstream File"@en
relationship type described byni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_describedBy
Is to be used an SPDXRef-A is described by SPDXRef-Document.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used an SPDXRef-A is described by SPDXRef-Document."@en
relationship type describesni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_describes
Is to be used when SPDXRef-DOCUMENT describes SPDXRef-A.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-DOCUMENT describes SPDXRef-A."@en
relationship type dev dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_devDependencyOf
Is to be used when SPDXRef-A is a development dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a development dependency of SPDXRef-B."@en
relationship type dev tool ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_devToolOf
Is to be used when SPDXRef-A is a development dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a development dependency of SPDXRef-B."@en
relationship type distribution artifactni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_distributionArtifact
A Relationship of relationshipType_distributionArtifact expresses that distributing the SPDXElement requires that the relatedSPDXElement also be distributed. For example, distributing a binary File may require that a source tarball (another File) be made available with the distribuiton.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_distributionArtifact expresses that distributing the SPDXElement requires that the relatedSPDXElement also be distributed. For example, distributing a binary File may require that a source tarball (another File) be made available with the distribuiton. "@en
relationship type documentationni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_documentation
To be used when SPDXRef-A provides documentation of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "To be used when SPDXRef-A provides documentation of SPDXRef-B."@en
relationship type dynamic linkni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_dynamicLink
Is to be used when SPDXRef-A dynamically links to SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A dynamically links to SPDXRef-B."@en
relationship type example ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_exampleOf
Is to be used when SPDXRef-A is an example of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is an example of SPDXRef-B."@en
relationship type expanded from archiveni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_expandedFromArchive
A Relationship of relationshipType_expandedFromArchive expresses that the SPDXElement is a file which was epanded from a relatedSPDXElement file. For example, if there is an archive file xyz.tar.gz containing a file foo.c the archive file was expanded in a directory arch/xyz, the file arch/xyz/foo.c would have a relationshipType_expandedFromArchive with the file xyz.tar.gz.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_expandedFromArchive expresses that the SPDXElement is a file which was epanded from a relatedSPDXElement file. For example, if there is an archive file xyz.tar.gz containing a file foo.c the archive file was expanded in a directory arch/xyz, the file arch/xyz/foo.c would have a relationshipType_expandedFromArchive with the file xyz.tar.gz."@en
relationship type file addedni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_fileAdded
A Relationship of relationshipType_fileAdded expresses that the SPDXElement is a file which has been added to the relatedSPDXElement package. For example, a package (the relatedSPDXElement) has been patched to remove a file (the SPDXElement). This relationship is typically used to express the result of a patched package when the actual patchfile is not present.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_fileAdded expresses that the SPDXElement is a file which has been added to the relatedSPDXElement package. For example, a package (the relatedSPDXElement) has been patched to remove a file (the SPDXElement). This relationship is typically used to express the result of a patched package when the actual patchfile is not present."@en
relationship type file deletedni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_fileDeleted
A Relationship of relationshipType_fileDeleted expresses that the SPDXElement is a package where the relatedSPDXElement file has been removed. For example, a package has been patched to remove a file a file (the relatedSPDXElement resulting in the patched package (the SPDXElement). This relationship is typically used to express the result of a patched package when the actual patchfile is not present.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_fileDeleted expresses that the SPDXElement is a package where the relatedSPDXElement file has been removed. For example, a package has been patched to remove a file a file (the relatedSPDXElement resulting in the patched package (the SPDXElement). This relationship is typically used to express the result of a patched package when the actual patchfile is not present."@en
relationship type file modifiedni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_fileModified
A Relationship of relationshipType_fileModified expresses that the SPDXElement is a file which is a modified version of the relatedSPDXElement file. For example, a file (the SPDXElement) has been patched to modify the contents of the original file (the SPDXElement). This relationship is typically used to express the result of a patched package when the actual patchfile is not present.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_fileModified expresses that the SPDXElement is a file which is a modified version of the relatedSPDXElement file. For example, a file (the SPDXElement) has been patched to modify the contents of the original file (the SPDXElement). This relationship is typically used to express the result of a patched package when the actual patchfile is not present."@en
relationship type generated fromni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_generatedFrom
A Relationship of relationshipType_generatedFrom expresses that an SPDXElement was generated from the relatedSPDXElement. For example, a binary File might have been generated from a source File.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_generatedFrom expresses that an SPDXElement was generated from the relatedSPDXElement. For example, a binary File might have been generated from a source File."@en
relationship type generatesni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_generates
A Relationship of relationshipType_generates expresses that an SPDXElement generates the relatedSPDXElement. For example, a source File generates a binary File.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_generates expresses that an SPDXElement generates the relatedSPDXElement. For example, a source File generates a binary File."@en
relationship type has prerequisiteni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_hasPrerequisite
Is to be used when SPDXRef-A has as a prerequisite SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A has as a prerequisite SPDXRef-B."@en
relationship type metafile ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_metafileOf
To be used when SPDXRef-A is a metafile of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "To be used when SPDXRef-A is a metafile of SPDXRef-B."@en
relationship type optional component ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_optionalComponentOf
To be used when SPDXRef-A is an optional component of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "To be used when SPDXRef-A is an optional component of SPDXRef-B."@en
relationship type optional dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_optionalDependencyOf
Is to be used when SPDXRef-A is an optional dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is an optional dependency of SPDXRef-B."@en
relationship type otherni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_other
to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field.
- belongs to
- relationship typec
- has facts
- commentdp "to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field."@en
relationship type package ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_packageOf
To be used when SPDXRef-A is used as a package as part of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "To be used when SPDXRef-A is used as a package as part of SPDXRef-B."@en
relationship type patch appliedni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_patchApplied
A Relationship of relationshipType_patchApplied expresses that the SPDXElement is a 'patchfile' that was applied and produced the relatedSPDXElement. For example, a .diff File relates to a specific file where the diff was applied.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_patchApplied expresses that the SPDXElement is a 'patchfile' that was applied and produced the relatedSPDXElement. For example, a .diff File relates to a specific file where the diff was applied."@en
relationship type patch forni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_patchFor
A Relationship of relationshipType_patchFor expresses that the SPDXElement is a 'patchfile' that is designed to patch (apply modifications to) the relatedSPDXElement. For example, relationship from a .diff File to a Package it is designed to patch.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_patchFor expresses that the SPDXElement is a 'patchfile' that is designed to patch (apply modifications to) the relatedSPDXElement. For example, relationship from a .diff File to a Package it is designed to patch. "@en
relationship type prerequisite forni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_prerequisiteFor
Is to be used when SPDXRef-A is a prerequisite for SPDXRef-B
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a prerequisite for SPDXRef-B"@en
relationship type provided dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_providedDependencyOf
Is to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B."@en
relationship type runtime dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_runtimeDependencyOf
Is to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B."@en
relationship type static linkni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_staticLink
Is to be used when SPDXRef-A statically links to SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A statically links to SPDXRef-B."@en
relationship type test dependency ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_testDependencyOf
Is to be used when SPDXRef-A is a test dependency of SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a test dependency of SPDXRef-B."@en
relationship type test ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_testOf
Is to be used when SPDXRef-A is used for testing SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is used for testing SPDXRef-B."@en
relationship type test tool ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_testToolOf
Is to be used when SPDXRef-A is used as a test tool for SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is used as a test tool for SPDXRef-B."@en
relationship type testcase ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_testcaseOf
Is to be used when SPDXRef-A is a test case used in testing SPDXRef-B.
- belongs to
- relationship typec
- has facts
- commentdp "Is to be used when SPDXRef-A is a test case used in testing SPDXRef-B."@en
relationship type variant ofni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#relationshipType_variantOf
A Relationship of relationshipType_variantOf expresses that an SPDXElement is a variant of the relatedSPDXElement, but it is not clear which came first. For example, if the content of two Files differs by some edit, but there is no way to tell which came first (no reliable date information), then one File is a variant of the other File.
- belongs to
- relationship typec
- has facts
- commentdp "A Relationship of relationshipType_variantOf expresses that an SPDXElement is a variant of the relatedSPDXElement, but it is not clear which came first. For example, if the content of two Files differs by some edit, but there is no way to tell which came first (no reliable date information), then one File is a variant of the other File."@en
reviewedni back to ToC or Named Individual ToC
IRI: https://spdx.org/rdf/terms#reviewed
Reviewed
- has facts
- commentdp "Reviewed"
- is also defined as
- object property
Annotation Properties
commentap back to ToC or Annotation Property ToC
IRI: https://www.w3.org/2000/01/rdf-schema#comment
- is also defined as
- data property
deprecated classap back to ToC or Annotation Property ToC
IRI: https://www.w3.org/2002/07/owl#deprecatedClass
deprecated propertyap back to ToC or Annotation Property ToC
IRI: https://www.w3.org/2002/07/owl#deprecatedProperty
qualified cardinalityap back to ToC or Annotation Property ToC
IRI: https://www.w3.org/2002/07/owl#qualifiedCardinality
term statusap back to ToC or Annotation Property ToC
IRI: https://www.w3.org/2003/06/sw-vocab-status/ns#term_status
- is defined by
- https://raw.githubusercontent.com/spdx/spdx-spec/updaterdfschema/ontology/spdx-ontology.owl.xml
General Axioms
All Disjoint Classes back to ToC
Namespace Declarations back to ToC
- default namespace
- https://spdx.org/rdf/terms#
- doap
- https://usefulinc.com/ns/doap#
- licenses
- https://spdx.org/licenses/
- ns
- https://www.w3.org/2003/06/sw-vocab-status/ns#
- owl
- https://www.w3.org/2002/07/owl#
- pointers
- https://www.w3.org/2009/pointers#
- rdf
- https://www.w3.org/1999/02/22-rdf-syntax-ns#
- rdfs
- https://www.w3.org/2000/01/rdf-schema#
- terms
- https://spdx.org/rdf/terms/
- xsd
- https://www.w3.org/2001/XMLSchema#
This HTML document was obtained by processing the OWL ontology source code through LODE, Live OWL Documentation Environment, developed by Silvio Peroni.
An Annotation is a comment on an SpdxItem by an agent.