Software Package Data Exchange

Software Package Data Exchange (SPDX9 is an open standard for software bill of materials (SBOM). SPDX allows the expression of components, licenses, copyrights, security references and other metadata relating to software.

💻 Source