SPDX 3.0 Has Breaking Changes Regarding Checksum

[init-dcat-ap-de]

SPDX 3.0 has breaking changes regarding the Checksum-class,

• Checksum-Class is now Hash: https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Classes/Hash/
• New HashAlgorithm-Vocabulary: https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Vocabularies/HashAlgorithm/
• New SHACL-Shapes: https://spdx.github.io/spdx-spec/v3.0/model/spdx-model.ttl

Connected to: #244

[bertvannuffelen]

@init-dcat-ap-de I raised an issue to the SPDX to re-establish the PURI version of the RDF.

I propose we first wait for their answer on the version management. Because if they are not concerned with any stability of an RDF exchange (each time publish new versioned RDF URIs) then this becomes very annoying for any user and then we may have to reposition the usage of this RDF representation.

[zvr]

SPDXv3 introduces a number of breaking changes and is based in a completely different model than SPDXv2 (not only for Checksums).

[zvr]

I do not know what usage of SPDX this project is doing, but the SPDX project is committed to providing completely stable IRIs for all the RDF entities that we publish.

If you are using SPDXv2, the IRIs are in the form of http://spdx.org/rdf/terms#... Yes, we realized that the version-less form was an error long ago, but we could not change it since it was in use.

If you are using SPDX v3.0.1, for example, the IRIs are in the form https://spdx.org/rdf/3.0.1/terms/... and will always remain as such.

Depending on what version of the standard you choose to use, you can rest assured that the IRIs will always remain stable.