# spdx-tools > SPDX parser and tools. - **URL**: https://www.freshcrate.ai/projects/spdx-tools - **Author**: SPDX group at the Linux Foundation and others - **Category**: Frameworks - **Latest version**: `0.8.5` (2026-04-21) - **License**: Unknown - **Source**: https://github.com/spdx/tools-python/blob/main/CHANGELOG.md - **Homepage**: https://pypi.org/project/spdx-tools/ - **Language**: Python - **GitHub**: 243 stars, 155 forks - **Registry**: pypi (`spdx-tools`) - **Tags**: `pypi` ## Description # Python library to parse, validate and create SPDX documents CI status (Linux, macOS and Windows): [![Install and Test][1]][2] [1]: https://github.com/spdx/tools-python/actions/workflows/install_and_test.yml/badge.svg [2]: https://github.com/spdx/tools-python/actions/workflows/install_and_test.yml ## Breaking changes v0.7 -> v0.8 Please be aware that the upcoming 0.8 release has undergone a significant refactoring in preparation for the upcoming SPDX v3.0 release, leading to breaking changes in the API. Please refer to the [migration guide](https://github.com/spdx/tools-python/wiki/How-to-migrate-from-0.7-to-0.8) to update your existing code. The main features of v0.8 are: - full validation of SPDX documents against the v2.2 and v2.3 specification - support for SPDX's RDF format with all v2.3 features - experimental support for the upcoming SPDX v3 specification. Note, however, that support is neither complete nor stable at this point, as the spec is still evolving. SPDX3-related code is contained in a separate subpackage "spdx3" and its use is optional. We do not recommend using it in production code yet. Note that v0.8 only supports **writing**, not **reading** SPDX 3.0 documents. See [#760](https://github.com/spdx/tools-python/issues/760) for details. ## Information This library implements SPDX parsers, convertors, validators and handlers in Python. - Home: - Issues: - PyPI: - Browse the API: Important updates regarding this library are shared via the SPDX tech mailing list: . ## License [Apache-2.0](LICENSE) ## Features - API to create and manipulate SPDX v2.2 and v2.3 documents - Parse, convert, create and validate SPDX files - Supported formats: Tag/Value, RDF, JSON, YAML, XML - Visualize the structure of a SPDX document by creating an `AGraph`. Note: This is an optional feature and requires additional installation of optional dependencies ## Experimental support for SPDX 3.0 - Create v3.0 elements and payloads - Convert v2.2/v2.3 documents to v3.0 - Serialize to JSON-LD See [Quickstart to SPDX 3.0](#quickstart-to-spdx-30) below. The implementation is based on the descriptive Markdown files in the repository (commit: a5372a3c145dbdfc1381fc1f791c68889aafc7ff). The latest SPDX 3.0 model is available at . ## Installation As always you should work in a virtualenv (venv). You can install a local clone of this repo with `yourenv/bin/pip install .` or install it from PyPI (check for the [newest release](https://pypi.org/project/spdx-tools/#history) and install it like `yourenv/bin/pip install spdx-tools==0.8.3`). Note that on Windows it would be `Scripts` instead of `bin`. ## How to use ### Command-line usage 1. **PARSING/VALIDATING** (for parsing any format): - Use `pyspdxtools -i ` where `` is the location of the file. The input format is inferred automatically from the file ending. - If you are using a source distribution, try running: `pyspdxtools -i tests/spdx/data/SPDXJSONExample-v2.3.spdx.json` 2. **CONVERTING** (for converting one format to another): - Use `pyspdxtools -i -o ` where `` is the location of the file to be converted and `` is the location of the output file. The input and output formats are inferred automatically from the file endings. - If you are using a source distribution, try running: `pyspdxtools -i tests/spdx/data/SPDXJSONExample-v2.3.spdx.json -o output.tag` - If you want to skip the validation process, provide the `--novalidation` flag, like so: `pyspdxtools -i tests/spdx/data/SPDXJSONExample-v2.3.spdx.json -o output.tag --novalidation` (use this with caution: note that undetected invalid documents may lead to unexpected behavior of the tool) - For help use `pyspdxtools --help` 3. **GRAPH GENERATION** (optional feature) - This feature generates a graph representing all elements in the SPDX document and their connections based on the provided relationships. The graph can be rendered to a picture. Below is an example for the file `tests/spdx/data/SPDXJSONExample-v2.3.spdx.json`: ![SPDXJSONExample-v2.3.spdx.png](assets/SPDXJSONExample-v2.3.spdx.png) - Make sure you install the optional dependencies `networkx` and `pygraphviz`. To do so run `pip install ".[graph_generation]"`. - Use `pyspdxtools -i --graph -o ` where `` is an output file name with valid format for `pygraphviz` (check the documentation [here](https://pygraphviz.github.io/documentation/stable/reference/agraph.html#pygraphviz.AGraph.draw)). - If you are using a source distribution, try running ## Recent releases | Version | Date | Urgency | Changes | | --- | --- | --- | --- | | `0.8.5` | 2026-04-21 | Low | Imported from PyPI (0.8.5) | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | | `v0.8.5` | 2026-03-13 | Low | ## What's Changed * pyproject.toml: Update Python versions + project URLs by @bact in https://github.com/spdx/tools-python/pull/871 * add changelog for upcoming release 0.8.4 by @armintaenzertng in https://github.com/spdx/tools-python/pull/872 * Update MANIFEST.in; remove appveyor.yml by @bact in https://github.com/spdx/tools-python/pull/874 * type hint: Make Optional explicit (PEP 484) by @bact in https://github.com/spdx/tools-python/pull/873 * Update changelog for 0.8.5 and fix linting er | ## Citation - HTML: https://www.freshcrate.ai/projects/spdx-tools - Markdown: https://www.freshcrate.ai/projects/spdx-tools.md - Dependencies JSON: https://www.freshcrate.ai/api/projects/spdx-tools/deps _Generated by freshcrate.ai. Indexes pypi releases for AI-agent ecosystem packages._