spdx / spdx-java-spreadsheet-store

SPDX Java library spreadsheet storage

spdx-java-spreadsheet-store

Stores SPDX documents in Microsoft Excel formats. Supports both XLS and XLSX file types.

This store supports serializing and deserializing files in XLS and XLSX spreadsheet formats.

This library utilizes the SPDX Java Library Storage Interface extending the ExtendedSpdxStore which allows for utilizing any underlying store which implements the SPDX Java Library Storage Interface.

Using the Library

This library is intended to be used in conjunction with the SPDX Java Library.

Create an instance of a store which implements the SPDX Java Library Storage Interface. For example, the InMemSpdxStore is a simple in-memory storage suitable for simple file serializations and deserializations.

Create an instance of SpreadsheetStore(IModelStore baseStore, SpreadsheetFormatType spreadsheetFormat) passing in the instance of a store created above along with the format. The format is one of the following:

• XLS - Microsoft Excel 97 to 2003 Workbook format
• XLSX - Microsoft Excel workbook format

Serializing and Deserializing

This library supports the ISerializableModelStore interface for serializing and deserializing files based on the format specified.

Development Status

Mostly stable - although it has not been widely used.

spdx-java-spreadsheet-store's Issues

Release Version 0.5 Checklist

• Create release for any dependent libraries which have changed (Spdx-Java-Library)
• Update dependency versions in the pom.xml file
• Update the version in the pom.xml file
• Publish using the command maven deploy - this will deploy to the bintray SPDX tools
• Sync the bintray repo with Maven Central
• Tag the repo with the release version
• Publish the release on github

Change deployments from Bintray to Maven Central and Github packages

Bintray is retiring their service on May 1. Prior to retirement, we need to start publishing an alternative package storage provider.

Suggest both Maven Central and Github Packages.

This can be automated using Github actions. See https://docs.github.com/en/actions/guides/publishing-java-packages-with-maven#publishing-packages-to-the-maven-central-repository-and-github-packages

Update POM file to use release plugin

See spdx/spdx-maven-plugin#125 for an example of what needs to be updated.

Release 1.1.5

• Review all PR's and Issues
• Pass unit tests
• Test tools-java dependent library
• Test cdx-to-spdx dependent library
• Run mvn org.owasp:dependency-check-maven:check
• Update version
• Run mvn deploy
• Release to Maven on Sonatype
• Create Github release

Can not export SPDX 2.3 to Excel formats

Hello @goneall

I am using the tools-java library for sw360 and implementing an export function to support SPDX 2.3
I can't export SPDX 2.3 to xls/xlsx by using this library (spdx-java-spreadsheet-store), I can fix this issue and will create a pull request now.

Please help me check this PR.

Anonymous properties at the Document level are copied to the root of the graph

When converting the
SPDXRdf-test.xls to RDF, the resultant
SPDXRdf-test.rdf.xml.txt contains duplicated DisjunctiveLicenseSet and CreationInformation at the root level of the RDF model.

Fix CI to skip sonar when pull requests submitted from non-SPDX users

When the CI runs for a pull request and the users is not part of the SPDX organization, the following error occurs:

Error:  Failed to execute goal org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184:sonar (default-cli) on project spdx-spreadsheet-store: Project not found. Please check the 'sonar.projectKey' and 'sonar.organization' properties, the 'SONAR_TOKEN' environment variable, or contact the project administrator -> [Help 1]