An open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases. The SPDX specification is a freely available international open standard (ISO/IEC 5692:2021).
![SPDX – Linux Foundation Projects Site](https://cdn-ak-scissors.b.st-hatena.com/image/square/262452f56c436fddafba73b9c288de186e71707c/height=288;version=1;width=512/https%3A%2F%2Fspdx.dev%2Fwp-content%2Fuploads%2Fsites%2F41%2F2021%2F06%2Fspdx_2400x1260.jpg)