Re: RFC: Adopting SPDX for SBOM generation

From: Lexi Winter <ivy_at_freebsd.org>
Date: Wed, 06 Aug 2025 10:46:27 UTC
Ed Maste:
> We would appreciate your feedback on:
> [...]
> - Integration with existing FreeBSD development workflows

> Any concerns or suggestions for the proposed approach

this may be too obvious to be worth mentioning, but just in case:
whatever tooling is used should make it possible to correctly populate
the license metadata in pkgbase during build.  at the moment we set this
to BSD2CLAUSE for every package, which is very wrong.