Brussels / 3 & 4 February 2024


SPDX 3.0 - a migration journey

SPDX 3.0 supports several new use cases, such as security vulnerability analysis, AI and Data compliance as well as increased flexibility in how the SPDX data is shared. Although many of the changes are compatible with previous versions of SPDX, there are also some "breaking changes" that require migration. In this talk, we will be discussing our real-world experience migrating the SPDX Java tools to support the 3.0 specification. Although the talk is centered on Java, the information will be useful for any software development project interested in supporting SPDX 3.0.


Photo of Gary O'Neall Gary O'Neall