{"action":"created","issue":{"url":"https://api.github.com/repos/nexB/aboutcode-toolkit/issues/328","repository_url":"https://api.github.com/repos/nexB/aboutcode-toolkit","labels_url":"https://api.github.com/repos/nexB/aboutcode-toolkit/issues/328/labels{/name}","comments_url":"https://api.github.com/repos/nexB/aboutcode-toolkit/issues/328/comments","events_url":"https://api.github.com/repos/nexB/aboutcode-toolkit/issues/328/events","html_url":"https://github.com/nexB/aboutcode-toolkit/issues/328","id":332540475,"node_id":"MDU6SXNzdWUzMzI1NDA0NzU=","number":328,"title":"Summarize package-level data in Attribution Notice","user":{"login":"mjherzog","id":4853767,"node_id":"MDQ6VXNlcjQ4NTM3Njc=","avatar_url":"https://avatars2.githubusercontent.com/u/4853767?v=4","gravatar_id":"","url":"https://api.github.com/users/mjherzog","html_url":"https://github.com/mjherzog","followers_url":"https://api.github.com/users/mjherzog/followers","following_url":"https://api.github.com/users/mjherzog/following{/other_user}","gists_url":"https://api.github.com/users/mjherzog/gists{/gist_id}","starred_url":"https://api.github.com/users/mjherzog/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjherzog/subscriptions","organizations_url":"https://api.github.com/users/mjherzog/orgs","repos_url":"https://api.github.com/users/mjherzog/repos","events_url":"https://api.github.com/users/mjherzog/events{/privacy}","received_events_url":"https://api.github.com/users/mjherzog/received_events","type":"User","site_admin":false},"labels":[{"id":45346491,"node_id":"MDU6TGFiZWw0NTM0NjQ5MQ==","url":"https://api.github.com/repos/nexB/aboutcode-toolkit/labels/enhancement","name":"enhancement","color":"84b6eb","default":true},{"id":965108848,"node_id":"MDU6TGFiZWw5NjUxMDg4NDg=","url":"https://api.github.com/repos/nexB/aboutcode-toolkit/labels/needs%20design","name":"needs design","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":{"login":"chinyeungli","id":4246379,"node_id":"MDQ6VXNlcjQyNDYzNzk=","avatar_url":"https://avatars3.githubusercontent.com/u/4246379?v=4","gravatar_id":"","url":"https://api.github.com/users/chinyeungli","html_url":"https://github.com/chinyeungli","followers_url":"https://api.github.com/users/chinyeungli/followers","following_url":"https://api.github.com/users/chinyeungli/following{/other_user}","gists_url":"https://api.github.com/users/chinyeungli/gists{/gist_id}","starred_url":"https://api.github.com/users/chinyeungli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chinyeungli/subscriptions","organizations_url":"https://api.github.com/users/chinyeungli/orgs","repos_url":"https://api.github.com/users/chinyeungli/repos","events_url":"https://api.github.com/users/chinyeungli/events{/privacy}","received_events_url":"https://api.github.com/users/chinyeungli/received_events","type":"User","site_admin":false},"assignees":[{"login":"chinyeungli","id":4246379,"node_id":"MDQ6VXNlcjQyNDYzNzk=","avatar_url":"https://avatars3.githubusercontent.com/u/4246379?v=4","gravatar_id":"","url":"https://api.github.com/users/chinyeungli","html_url":"https://github.com/chinyeungli","followers_url":"https://api.github.com/users/chinyeungli/followers","following_url":"https://api.github.com/users/chinyeungli/following{/other_user}","gists_url":"https://api.github.com/users/chinyeungli/gists{/gist_id}","starred_url":"https://api.github.com/users/chinyeungli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chinyeungli/subscriptions","organizations_url":"https://api.github.com/users/chinyeungli/orgs","repos_url":"https://api.github.com/users/chinyeungli/repos","events_url":"https://api.github.com/users/chinyeungli/events{/privacy}","received_events_url":"https://api.github.com/users/chinyeungli/received_events","type":"User","site_admin":false},{"login":"DennisClark","id":4991620,"node_id":"MDQ6VXNlcjQ5OTE2MjA=","avatar_url":"https://avatars3.githubusercontent.com/u/4991620?v=4","gravatar_id":"","url":"https://api.github.com/users/DennisClark","html_url":"https://github.com/DennisClark","followers_url":"https://api.github.com/users/DennisClark/followers","following_url":"https://api.github.com/users/DennisClark/following{/other_user}","gists_url":"https://api.github.com/users/DennisClark/gists{/gist_id}","starred_url":"https://api.github.com/users/DennisClark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DennisClark/subscriptions","organizations_url":"https://api.github.com/users/DennisClark/orgs","repos_url":"https://api.github.com/users/DennisClark/repos","events_url":"https://api.github.com/users/DennisClark/events{/privacy}","received_events_url":"https://api.github.com/users/DennisClark/received_events","type":"User","site_admin":false}],"milestone":null,"comments":3,"created_at":"2018-06-14T19:49:44Z","updated_at":"2018-09-10T22:07:13Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"When an Inventory data file is based on Package-level information, there are many cases where generating an Attribution entry for each Package may increase the length of the Attribution Notice significantly with redundant information. The most prominent use cases are likely Java projects/Components like Apache Batik or Spring Framework where you many have 10 or more JAR packages with same copyright and license information. We should offer some way to summarize this type of data by project/Component for Attribution Notices. This clearly needs discussion and design."},"comment":{"url":"https://api.github.com/repos/nexB/aboutcode-toolkit/issues/comments/420077351","html_url":"https://github.com/nexB/aboutcode-toolkit/issues/328#issuecomment-420077351","issue_url":"https://api.github.com/repos/nexB/aboutcode-toolkit/issues/328","id":420077351,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMDA3NzM1MQ==","user":{"login":"DennisClark","id":4991620,"node_id":"MDQ6VXNlcjQ5OTE2MjA=","avatar_url":"https://avatars3.githubusercontent.com/u/4991620?v=4","gravatar_id":"","url":"https://api.github.com/users/DennisClark","html_url":"https://github.com/DennisClark","followers_url":"https://api.github.com/users/DennisClark/followers","following_url":"https://api.github.com/users/DennisClark/following{/other_user}","gists_url":"https://api.github.com/users/DennisClark/gists{/gist_id}","starred_url":"https://api.github.com/users/DennisClark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DennisClark/subscriptions","organizations_url":"https://api.github.com/users/DennisClark/orgs","repos_url":"https://api.github.com/users/DennisClark/repos","events_url":"https://api.github.com/users/DennisClark/events{/privacy}","received_events_url":"https://api.github.com/users/DennisClark/received_events","type":"User","site_admin":false},"created_at":"2018-09-10T22:07:13Z","updated_at":"2018-09-10T22:07:13Z","author_association":"CONTRIBUTOR","body":"Note that if you already have a detailed \"filename\" or similar column in your Software BOM, you won't lose useful detail by summarizing component+version values for groups of files/packages, but you might need to ensure that the \"filename\" column is properly populated and understood by the Software BOM readers. "}}
{"actor":{"display_login":"DennisClark"}}