An open ISO standard for SBOMs
Aleksandr Lisianoi
Software Package Data Exchange (SPDX) is “a set of standards for communicating the components, licenses, and copyrights associated with software”....
Rohit Lodha
Building an easy all-in-one portal to upload and parse SPDX documents for validation, comparison and conversion and search SPDX license list by...
Nuvadga Christian Tete
There have been several talks about the need for a package level License Coverage Grade. This project will come up with an initial set of heuristics...
Anna Buhman
Design, develop, and implement an application that, when provided with a GitHub repository's URL, generates SPDX (https://spdx.org/) documents based...