Version 2.1.18 of the SPDX Java Tools

Update to Jena version 3.12. Added a fix for license matching exceptions.

Version 2.1.17 of the SPDX Java tools

Fixes issues with license matching required for a new release of the LicenseListPublisher.

Version 2.1.16

Updates dependent library versions resolving the following security vulnerabilities:

• CVE-2018-14721, CWE-502
• CWE-22
• CVE-2017-12626, CWE-835
• CVE-2018-19360, CWE-502
• CWE-400
• CVE-2018-14719, CWE-502
• CVE-2018-11771, CWE-400
• CVE-2018-10237, CWE-119
• CVE-2015-6748, CWE-79
• CVE-2018-14720, CWE-502
• CVE-2018-14718, CWE-502
• CVE-2018-19361, CWE-502

Updated documentation, general code cleanup.

Version 2.1.15 of the SPDX Java Tools

Includes support for deprecated license exceptions. This release also updates json-simple to version 2.3.1.

NOTE: this release changes the interface to the licenseListPublisher. LicenseListPublisher version 2.1.15 or greater is compatible with this version of the tools.

Version 2.1.14

Update Jena to version 3.9.0 and clean up the POM file. Removes dependencies on non-Maven Central repositories.

Version 2.1.13 of the SPDX tools

Resolves some issues including sorting the JSON file table of contents - required to resolves issues in the license list publisher

Version 2.1.12

Version 2.1.2 includes the following improvements:

• Read JSON-LD format of the listed licenses instead of RDFa (depends on version 3.1 of the SPDX license list). Resolves issue #146.
• Fix NPE issue #155
• TagToRdf online function now takes optional output file types
• Moved the LicenseRdfaGenerator to a separate utility
• Removed several dependencies - should address issue #145

Some functions depend on a resources directory. The resources archive should be unarchived as a subdirectory where the SPDX tools are installed.
resources.zip

SPDX Tools Version 2.1.7

Update to the SPDX tools. The primary improvements are in the license matching and license parsing.

Some functions depend on a resources directory. The resources archive should be unarchived as a subdirectory where the SPDX tools are installed.

Version 2.1.6

Version 2.1.6 of the SPDX Tools. Fixes a critical issue where a null pointer except occurs when Jena has not been previous configured.

2.1.4 - Jena 3, bug fixes, etc

The JAR files in this release has a know problem which cases an exception. Please use the 2.1.2 version.
From this release forward, Java 8 is required.

• Upgraded to Jena 3.1.1 (to support future features)
• Error message improvements
• Fixed parsing error with nbsp characters
• Tool to publish license list from github