[BUG] OrganizationalEntity validation error should not be raised

[pombredanne]

A spec-valid JSON BOM 1.4 with {"supplier":{"name":""}, fails to load and should not fail.

The code at

cyclonedx-python-lib/cyclonedx/model/contact.py

Line 282 in 4293101

if not name and not urls and not contacts:

makes loading a BOM that has a name as an empty string to fail.

There is nothing in the spec that says this is invalid... I can accept that there is a way to do a strict validation, but this should be an option AND this should not make it impossible to load a JSON. If this cannot be loaded, fixing the issue is made much harder.

The spec at https://github.com/CycloneDX/specification/blob/1.6/schema/bom-1.4.schema.json#L203 does not have any such requirements, same in https://cyclonedx.org/docs/1.4/xml/#type_organizationalEntity and other versions of the spec.

IMHO such as exception here and elsewhere SHOULD NEVER be raised unless an explicit request for a strict validation for empty values is requested above and beyond what is in the spec.

@tdruez ping

[pombredanne]

@jkowalleck FYI, this is the kind of workaround that is needed short term to read CDX from some weird tool that produce these documents:

aboutcode-org/scancode.io@1bd0e4d#diff-ea7df675af2b46146067bf4d4314ece949da068c9ae5635fa423c19f008209b3R211

[jkowalleck]

expected to be fixed in https://github.com/CycloneDX/cyclonedx-python-lib/releases/tag/v7.3.4

[pombredanne]

Thank you.