FAIRsharing record for: The System Package Data Exchange (SPDX) Specification

This FAIRsharing record describes: The System Package Data Exchange (SPDX) Specification (current version 3.0.1) is an international open standard (ISO/IEC 5962:2021) for communicating bill of materials (BOM) information for different topic areas. The SPDX specification is an open standard designed to represent systems containing software components as Software Bill of Materials (SBOMs). Additionally, SPDX supports AI, data, and security references, making it suitable for a wide range of risk management use cases. The SPDX standard helps facilitate compliance with free and open source software licenses by standardizing the way license information is shared across the software supply chain. SPDX reduces redundant work by providing a common format for companies and communities to share important data about software licenses and copyrights, thereby streamlining and improving compliance.