Issues

Issues

• Potential ReDoS in ActorParser: quadratic backtracking on crafted Person:/Organization: values

  spdx/tools-python#907 · opened on Sep 15, 2026

• Tag-value lexer silently drops an uppercase checksum value, producing Checksum(SHA1, "")

  spdx/tools-python#903 · opened on Jul 29, 2026

• bump_spdx_document crashes with 'too many values to unpack' on an spdx_id containing more than one colon

  spdx/tools-python#901 · opened on Jul 27, 2026

• Tagvalue parser relationship tracking optimization

  spdx/tools-python#891 · opened on May 20, 2026
  1

• Pyspdxtools fails to parse spdx file

  spdx/tools-python#890 · opened on Apr 8, 2026
  1

• Support passing an updated license database to pyspdxtools

  spdx/tools-python#888 · opened on Apr 1, 2026

• Apache-1.0+ not recognized as a valid license

  spdx/tools-python#887 · opened on Mar 31, 2026

• Package without a name is not flagged as invalid

  spdx/tools-python#885 · opened on Mar 17, 2026
  1

• ply is deprecated

  spdx/tools-python#878 · opened on Feb 2, 2026
  2

• Additional Recommendation (Productivity & Ecosystem Impact

  spdx/tools-python#876 · opened on Jan 28, 2026

• Missing py.typed for spdx3

  spdx/tools-python#865 · opened on Nov 19, 2025
  1

• SPDX 2.3 tagvalue parser cannot parse documents with erroneous SHA256 ExternalDocumentRef checksums

  spdx/tools-python#864 · opened on Sep 24, 2025
  1

• context.json is not passing validation from spdx3-validate

  spdx/tools-python#863 · opened on Sep 24, 2025
  1

• Parser crashes on invalid input file instead of showing errors

  spdx/tools-python#862 · opened on Sep 11, 2025
  1

• PackageDownloadLocation validation doesn't allow underscores in git URLs

  spdx/tools-python#860 · opened on Aug 20, 2025
  1

• SPDX3: Unable to access license data using LicenseDeclared

  spdx/tools-python#859 · opened on Aug 19, 2025

• No license definition should be flagged as invalid

  spdx/tools-python#857 · opened on Jul 11, 2025

• Empty package name not detected despite being required

  spdx/tools-python#850 · opened on Apr 10, 2025
  1

• JSON to XML conversion: Hyphen in 'PACKAGE-MANAGER' replaced with Underscore

  spdx/tools-python#849 · opened on Apr 10, 2025
  4

• Should I check for prohibited strings?

  spdx/tools-python#848 · opened on Apr 10, 2025

• Missing PackageVerificationCode should be flagged as invalid

  spdx/tools-python#845 · opened on Mar 5, 2025
  1

• tag_value writer does not write relationships where package contains file

  spdx/tools-python#843 · opened on Feb 19, 2025
  1

• Spurious warnings when run from read-only filesystem due to old ply version

  spdx/tools-python#838 · opened on Dec 10, 2024
  1

• Publish spdx-tools under a SPDX organisation on PyPI

  spdx/tools-python#837 · opened on Nov 28, 2024
  2

• Very badly formed SPDX generates exceptions other than SPDXParsingError

  spdx/tools-python#831 · opened on Oct 10, 2024