Issues

• Potential ReDoS in ActorParser: quadratic backtracking on crafted Person:/Organization: values

  spdx/tools-python#907 · Filter by author SirLiftington opened on Sep 15, 2026

• Tag-value lexer silently drops an uppercase checksum value, producing Checksum(SHA1, "")

  spdx/tools-python#903 · Filter by author Atishyy27 opened on Jul 29, 2026

• bump_spdx_document crashes with 'too many values to unpack' on an spdx_id containing more than one colon

  spdx/tools-python#901 · Filter by author Atishyy27 opened on Jul 27, 2026

• Tagvalue parser relationship tracking optimization

  spdx/tools-python#891 · Filter by author ebardie opened on May 20, 2026
  1

• Pyspdxtools fails to parse spdx file

  spdx/tools-python#890 · Filter by author hdxtreeem opened on Apr 8, 2026
  1

• Support passing an updated license database to pyspdxtools

  spdx/tools-python#888 · Filter by author joshtriplett opened on Apr 1, 2026

• Apache-1.0+ not recognized as a valid license

  spdx/tools-python#887 · Filter by author vargenau opened on Mar 31, 2026

• Package without a name is not flagged as invalid

  spdx/tools-python#885 · Filter by author vargenau opened on Mar 17, 2026
  1

• ply is deprecated

  spdx/tools-python#878 · Filter by author priv-kweihmann opened on Feb 2, 2026
  2

• Additional Recommendation (Productivity & Ecosystem Impact

  spdx/tools-python#876 · Filter by author devashridatta-dotcom opened on Jan 28, 2026

• Missing py.typed for spdx3

  spdx/tools-python#865 · Filter by author bryceberger opened on Nov 19, 2025
  1

• SPDX 2.3 tagvalue parser cannot parse documents with erroneous SHA256 ExternalDocumentRef checksums

  spdx/tools-python#864 · Filter by author richardmaw-codethink opened on Sep 24, 2025
  1

• context.json is not passing validation from spdx3-validate

  spdx/tools-python#863 · Filter by author pellecchialuigi opened on Sep 24, 2025

• Parser crashes on invalid input file instead of showing errors

  spdx/tools-python#862 · Filter by author vargenau opened on Sep 11, 2025
  1

• PackageDownloadLocation validation doesn't allow underscores in git URLs

  spdx/tools-python#860 · Filter by author trupples opened on Aug 20, 2025
  1

• SPDX3: Unable to access license data using LicenseDeclared

  spdx/tools-python#859 · Filter by author rawaha-e opened on Aug 19, 2025

• No license definition should be flagged as invalid

  spdx/tools-python#857 · Filter by author vargenau opened on Jul 11, 2025

• Empty package name not detected despite being required

  spdx/tools-python#850 · Filter by author NorioKobota opened on Apr 10, 2025
  1

• JSON to XML conversion: Hyphen in 'PACKAGE-MANAGER' replaced with Underscore

  spdx/tools-python#849 · Filter by author NorioKobota opened on Apr 10, 2025
  4

• Should I check for prohibited strings?

  spdx/tools-python#848 · Filter by author NorioKobota opened on Apr 10, 2025

• Missing PackageVerificationCode should be flagged as invalid

  spdx/tools-python#845 · Filter by author vargenau opened on Mar 5, 2025
  1

• tag_value writer does not write relationships where package contains file

  spdx/tools-python#843 · Filter by author arbassett-qnx opened on Feb 19, 2025
  1

• Spurious warnings when run from read-only filesystem due to old ply version

  spdx/tools-python#838 · Filter by author bmihaila-bd opened on Dec 10, 2024
  1

• Publish spdx-tools under a SPDX organisation on PyPI

  spdx/tools-python#837 · Filter by author bact opened on Nov 28, 2024
  2

• Very badly formed SPDX generates exceptions other than SPDXParsingError

  spdx/tools-python#831 · Filter by author king-doug-conti opened on Oct 10, 2024