Your files stay on your device

SPDX validator

Validate SPDX 2.2 or 2.3 documents in JSON or tag-value form: required fields, ids and namespaces, relationships, checksums, and license expressions, each problem with its location.

Paste an SPDX document, drop a file, or load an example. Findings appear as you type.

The checks are the structural rules the official SPDX 2.2 and 2.3 schemas and field cards declare: required root and creation fields, SPDXRef- id shape and uniqueness, the documentNamespace URI rules, relationship endpoints and type enums, checksum length per algorithm, the 40-hex verification code, and license expressions against the bundled list. They do not cover every optional field, so a document can pass here and still carry semantic problems. SPDX 3, RDF/XML, and YAML are reported as unsupported instead of half-validated.
OptionsValidate

More JSON tools

- SBOM validator (/json/cyclonedx-validator)
- JSON schema validator (/json/schema)
- JSON validator (/json/validator)
All JSON tools (/json)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/json/spdx-validator
Markdown version: https://nutter.tools/json/spdx-validator.md
Plain-text version: https://nutter.tools/json/spdx-validator.txt
Agent index: https://nutter.tools/llms.txt