Your files stay on your device

SPDX validator

Validate SPDX 2.2 or 2.3 documents in JSON or tag-value form: required fields, ids and namespaces, relationships, checksums, and license expressions, each problem with its location.

Paste an SPDX document, drop a file, or load an example. Findings appear as you type.

The checks are the structural rules the official SPDX 2.2 and 2.3 schemas and field cards declare: required root and creation fields, SPDXRef- id shape and uniqueness, the documentNamespace URI rules, relationship endpoints and type enums, checksum length per algorithm, the 40-hex verification code, and license expressions against the bundled list. They do not cover every optional field, so a document can pass here and still carry semantic problems. SPDX 3, RDF/XML, and YAML are reported as unsupported instead of half-validated.

SBOM validator
JSON schema validator
JSON validator

All JSON tools

Was this tool useful?

SPDX validator

More JSON tools