audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories

This commit is contained in:
master
2026-01-07 18:49:59 +02:00
parent 04ec098046
commit 608a7f85c0
866 changed files with 56323 additions and 6231 deletions

View File

@@ -0,0 +1,25 @@
# SPDX3 Library Charter
## Mission
- Provide SPDX 3.0.1 parsing, validation, and profile support.
## Responsibilities
- Parse SPDX JSON-LD and surface deterministic models.
- Validate profile conformance and identifiers.
- Resolve contexts with offline-friendly defaults.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/sbom-service/architecture.md
- docs/modules/sbom-service/spdx3-profile-support.md
## Working Agreement
- Deterministic parsing and invariant formatting.
- Use TimeProvider and IGuidGenerator where timestamps or IDs are created.
- Avoid network dependencies unless explicitly enabled.
## Testing Strategy
- Unit tests for parser/validator behavior and error paths.
- Determinism tests for stable ordering and output.