Use of deprecated field to state relationships in SBOM

[Moullisha]

Describe the bug
documentDescribes is a deprecated field and should not be used to describe relationships in SBOM. Instead relationships array should be used.

System configuration

• Which version of ScanCode.io are you running?
• Are you running the app using Docker?
• On which OS?
• What inputs are you using?
• Which pipeline are you running?

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
As per SPDX schema, documentDescribes is a deprecated field and relationships array should be used to describe relationship b/w different packages of the SBOM.

https://github.com/spdx/spdx-spec/blob/support/2.3.1/schemas/spdx-schema.json

Screenshots
If applicable, add screenshots to help explain your problem.

[manvendra5345]

Hi @Moullisha ,

I’m interested in working on this issue as part of GSoC. I’ve gone through the issue details and related code, and I’d love to take ownership and start contributing.

If it’s available, could you please assign this issue to me?

[tdruez]

Hi @Moullisha We do not plan to change the behavior of documentDescribes.
See #564 (comment), spdx/spdx-spec#395, and #1856