Data Property: supplier

comment "Identify the actual distribution source for the package/directory identified in the SPDX file. This may or may not be different from the originating distribution source for the package. The name of the Package Supplier must be an organization or recognized author and not a web site. For example, Sourceforge is a host website, not a supplier, the supplier for http://sourceforge.net/projects/bridge/ is "The Linux Foundation." NOASSERTION should be used if: (i) the SPDX file creator has attempted to but cannot reach a reasonable objective determination of who the supplier is; (ii) the project is orphaned and was obtained from a public website; or (iii) the SPDX file creator has intentionally provided no information (no meaning should be implied by doing so). " (en)
term_status "stable" (en)

http://spdx.org/rdf/terms#supplier