{"updated":"2025-01-19T14:56:23.116894+00:00","links":{},"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00219059","sets":["1164:1384:10896:10984"]},"path":["10984"],"owner":"44499","recid":"219059","title":["Debianパッケージに対する依存関係を含むSPDX ファイルの自動生成ツール"],"pubdate":{"attribute_name":"公開日","attribute_value":"2022-07-21"},"_buckets":{"deposit":"951dd67f-d5c4-41aa-b7db-80efbe64a5db"},"_deposit":{"id":"219059","pid":{"type":"depid","value":"219059","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"Debianパッケージに対する依存関係を含むSPDX ファイルの自動生成ツール","author_link":["570972","570968","570973","570974","570970","570969","570971","570975"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"Debianパッケージに対する依存関係を含むSPDX ファイルの自動生成ツール"},{"subitem_title":"SPDX file generation tool for Debian packages including dependency relations","subitem_title_language":"en"}]},"item_type_id":"4","publish_date":"2022-07-21","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"大阪大学大学院情報科学研究科"},{"subitem_text_value":"福知山公立大学情報学部大阪大学大学院情報科学研究科"},{"subitem_text_value":"南山大学理工学部ソフトウェア工学科"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Faculty of Engineering, First University","subitem_text_language":"en"},{"subitem_text_value":"Faculty of Informatics, The University of Fukuchiyama","subitem_text_language":"en"},{"subitem_text_value":"Faculty of Engineering, First University","subitem_text_language":"en"},{"subitem_text_value":" Faculty of Science and Technology, Nanzan University","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/219059/files/IPSJ-SE22211033.pdf","label":"IPSJ-SE22211033.pdf"},"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-SE22211033.pdf","filesize":[{"value":"2.0 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"0","billingrole":"12"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_login","version_id":"cfa6b692-b189-4111-8807-522ced1e6e68","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2022 by the Institute of Electronics, Information and Communication Engineers This SIG report is only available to those in membership of the SIG."}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"田邉, 傑士"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"眞鍋, 雄貴"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"神田, 哲也"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"井上, 克郎"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Taketo, Tanabe","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Yuki, Manabe","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tetuya, Kanda","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Katsuro, Inoue","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AN10112981","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8825","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"近年，サプライチェーン上のリスクを管理するため SBoM（Software Bill of Materials）の導入が進んでいる．SPDX（Software Package Data Exchange）は主要な SBoM の仕様の 1 つであり，利用者にライセンスを遵守させることを目的の一つとして作成された． 他方，ライセンスを遵守するには依存関係を理解しておくことが重要である．しかし現状，依存関係を含めた SPDX ファイルを自動生成するツールは見受けられない．そこで本研究では Debian パッケージを対象に依存関係の記述を含めた SPDX ファイルを自動生成するツールを開発した．その結果，依存関係の記述を含んだ上で SPDX の要件を正しく満たす SPDX ファイルの生成に成功した．本論文ではその手法と生成結果について示す．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"In recent years, the Software Bill of Materials (SBoM) has been increasingly adopted to manage risks in the supply chain, and the Software Package Data Exchange (SPDX) is one of the main SBoM specifications, created to ensure that users comply with licenses. On the other hand, it is important to understand the dependencies in order to comply with the license. Currently, however, there are no tools that automatically generate SPDX files including dependencies. Therefore, we developed a tool to automatically generate SPDX files including dependency descriptions for Debian packages. As a result, we succeeded in generating SPDX files that include dependency descriptions and satisfy the SPDX requirements. This paper describes the method and results of the generation.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"6","bibliographic_titles":[{"bibliographic_title":"研究報告ソフトウェア工学（SE）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2022-07-21","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"33","bibliographicVolumeNumber":"2022-SE-211"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":219059,"created":"2025-01-19T01:19:23.701833+00:00"}