DFSG NEW Queue

DFSG, Licensing & New Packages Team

sarif-oasis-schemas 2.1.0+errata01-1

Package Information

DescriptionOASIS SARIF 2.1.0 JSON schemas

The Static Analysis Results Interchange Format (SARIF) 2.1.0 is the OASIS standard for the output of static analysis tools and vulnerability scanners. This package ships the two JSON schemas that the OASIS Standard publishes as part of its Work Product: one for a SARIF log and one for an external property file. Tools use them to check that a log conforms to the standard, for example with check-jsonschema.

The files are installed in /usr/share/sarif/schemas.

This package is in non-free because the OASIS Standard notice that covers the schemas permits verbatim copying but forbids modification, which the Debian Free Software Guidelines require.

MaintainerJuan Manuel Méndez Rey <juan.mendezr@proton.me>
Changed ByJuan Manuel Méndez Rey <juan.mendezr@proton.me>
Sponsortsimonq2@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/mendezr/sarif-oasis-schemas.git (browse)
Closes#1153015
Trackerhttps://tracker.debian.org/pkg/sarif-oasis-schemas
Uploaded2 hours ago

New Package Report

.changes◂
Distributionunstable
DateWed, 04 Nov 2026 13:30:00 +0100
Sourcesarif-oasis-schemas
Version2.1.0+errata01-1
Changed-ByJuan Manuel Méndez Rey <juan.mendezr@proton.me>
Architecturesource all
Changelog◂
sarif-oasis-schemas (2.1.0+errata01-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1153015)
.dsc◂
Componentnon-free
Package-Listsarif-oasis-schemas deb non-free/misc optional arch=all
Sectionnon-free/misc
Priorityoptional
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: SARIF 2.1.0 JSON schemas
Upstream-Contact: https://github.com/oasis-tcs/sarif-spec/issues
Source: https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/
Comment: The two files are the ones that the SARIF Version 2.1.0 Plus Errata
 01 OASIS Standard names as components of its Work Product. The license below
 is the Notices section of that standard, reproduced without changes, which is
 the condition under which the files may be copied.

Files: *
Copyright: 2023 OASIS Open
License: OASIS-Standard-Notice

Files: debian/*
Copyright: 2026 Juan Manuel Méndez Rey <juan.mendezr@proton.me>
License: Expat
Comment: The packaging is free; the schemas it installs are not.

License: OASIS-Standard-Notice
 Copyright © OASIS Open 2023. All Rights Reserved.
 .
 All capitalized terms in the following text have the meanings assigned to
 them in the OASIS Intellectual Property Rights Policy (the "OASIS IPR
 Policy"). The full Policy may be found at the OASIS website:
 [https://www.oasis-open.org/policies-guidelines/ipr/].
 .
 This document and translations of it may be copied and furnished to others,
 and derivative works that comment on or otherwise explain it or assist in
 its implementation may be prepared, copied, published, and distributed, in
 whole or in part, without restriction of any kind, provided that the above
 copyright notice and this section are included on all such copies and
 derivative works.
 .
 However, this document itself may not be modified in any way, including by
 removing the copyright notice or references to OASIS, except as needed for
 the purpose of developing any document or deliverable produced by an OASIS
 Technical Committee (in which case the rules applicable to copyrights, as
 set forth in the OASIS IPR Policy, must be followed) or as required to
 translate it into languages other than English.
 .
 The limited permissions granted above are perpetual and will not be revoked
 by OASIS or its successors or assigns.
 .
 This document and the information contained herein is provided on an "AS
 IS" basis and OASIS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
 BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL
 NOT INFRINGE ANY OWNERSHIP RIGHTS OR ANY IMPLIED WARRANTIES OF
 MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. OASIS AND ITS MEMBERS
 WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL
 DAMAGES ARISING OUT OF ANY USE OF THIS DOCUMENT OR ANY PART THEREOF.
 .
 As stated in the OASIS IPR Policy, the following three paragraphs in
 brackets apply to OASIS Standards Final Deliverable documents (Committee
 Specifications, OASIS Standards, or Approved Errata).
 .
 [OASIS requests that any OASIS Party or any other party that believes it
 has patent claims that would necessarily be infringed by implementations of
 this OASIS Standards Final Deliverable, to notify OASIS TC Administrator
 and provide an indication of its willingness to grant patent licenses to
 such patent claims in a manner consistent with the IPR Mode of the OASIS
 Technical Committee that produced this deliverable.]
 .
 [OASIS invites any party to contact the OASIS TC Administrator if it is
 aware of a claim of ownership of any patent claims that would necessarily
 be infringed by implementations of this OASIS Standards Final Deliverable
 by a patent holder that is not willing to provide a license to such patent
 claims in a manner consistent with the IPR Mode of the OASIS Technical
 Committee that produced this OASIS Standards Final Deliverable. OASIS may
 include such claims on its website, but disclaims any obligation to do so.]
 .
 [OASIS takes no position regarding the validity or scope of any
 intellectual property or other rights that might be claimed to pertain to
 the implementation or use of the technology described in this OASIS
 Standards Final Deliverable or the extent to which any license under such
 rights might or might not be available; neither does it represent that it
 has made any effort to identify any such rights. Information on OASIS'
 procedures with respect to rights in any document or deliverable produced
 by an OASIS Technical Committee can be found on the OASIS website. Copies
 of claims of rights made available for publication and any assurances of
 licenses to be made available, or the result of an attempt made to obtain a
 general license or permission for the use of such proprietary rights by
 implementers or users of this OASIS Standards Final Deliverable, can be
 obtained from the OASIS TC Administrator. OASIS makes no representation
 that any information or list of intellectual property rights will at any
 time be complete, or that any claims in such list are, in fact, Essential
 Claims.]
 .
 The name "OASIS" is a trademark of OASIS, the owner and developer of this
 document, and should be used only to refer to the organization and its
 official outputs. OASIS welcomes reference to, and implementation and use
 of, documents, while reserving the right to enforce its marks against
 misleading uses. Please see
 https://www.oasis-open.org/policies-guidelines/trademark/ for above
 guidance.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

Back to Dashboard | View all reviews for this package