During testing CCMM on examples we encountered confusion around the usage note for Checksum uses algorithm. The current usage note states: "Version 2.2 of [SPDX] defines individuals for the following algorithms: MD2, MD4, MD5, MD6, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512."
It lists the available algorithms, but it does not instruct how it should be used. We suggest to provide more direct instructions regarding using instances of SPDX class checksum algorithm, for example: "Use one of the predefined instances of checksum algorithm from SPDX. SPDX provides predefined individuals for common algorithms (e.g., SHA-256)."
Moreover, the current ChecksumAlgorithm link in the documentation points to the SPDX ontology in general, rather than to the specific SPDX checksum algorithm class.
Instead of http://spdx.org/rdf/terms#ChecksumAlgorithm, it should point to:
https://spdx.org/rdf/terms/#d4e2129
During testing CCMM on examples we encountered confusion around the usage note for Checksum uses algorithm. The current usage note states: "Version 2.2 of [SPDX] defines individuals for the following algorithms: MD2, MD4, MD5, MD6, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512."
It lists the available algorithms, but it does not instruct how it should be used. We suggest to provide more direct instructions regarding using instances of SPDX class checksum algorithm, for example: "Use one of the predefined instances of checksum algorithm from SPDX. SPDX provides predefined individuals for common algorithms (e.g., SHA-256)."
Moreover, the current ChecksumAlgorithm link in the documentation points to the SPDX ontology in general, rather than to the specific SPDX checksum algorithm class.
Instead of http://spdx.org/rdf/terms#ChecksumAlgorithm, it should point to:
https://spdx.org/rdf/terms/#d4e2129