An open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases.
The SPDX specification is a freely available international open standard (ISO/IEC 5962:2021).
SPDX is organized in areas of interest or profiles focused on specific user needs.
See the Tools page for more info Pitloom automates the generation of SPDX 3-compliant Software Bills of Materials (SBOMs) for Python applications and AI models.…
Check out the Tools page for new additions: SBOMlyze- Apache-2.0 CLI and GitHub Action for reviewing SPDX, CycloneDX,and Syft SBOM changes. sbomqs- Comprehensive SBOM quality…
