The attribute downloadLocation is null when no information cannot be …

…retrieved
spdx · Jan 19, 2024 · deb7f81 · deb7f81
1 parent fad39c1
commit deb7f81
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/org/spdx/maven/utils/SpdxDependencyInformation.java b/src/main/java/org/spdx/maven/utils/SpdxDependencyInformation.java
@@ -360,6 +360,7 @@ private SpdxElement createSpdxPackage( Artifact artifact,
                         .setComment( "This package was created for a Maven dependency.  No SPDX or license information could be found in the Maven POM file." )
                         .setVersionInfo( artifact.getBaseVersion() )
                         .setFilesAnalyzed( false )
+                        .setDownloadLocation( "NOASSERTION" )
                         .build();
         return pkg;
     }