Sample Third Party Notice (TPN) Compliance Dataset – Devashri Datta

This dataset provides a structured, machine‑readable Third Party Notices (TPT) report created by Devashri Datta to support software supply‑chain compliance, SBOM workflows, and automated license‑obligation analysis. The dataset includes a standardized TPT sample, realistic open‑source component entries, SPDX license associations, and a reproducible formatting pipeline. It is intended for researchers, tool developers, and auditors evaluating license‑compliance mechanisms and software‑supply‑chain risk. This dataset demonstrates original technical contributions toward automating license intelligence, normalizing TPT formats, and enabling reproducible compliance benchmarking. By treating TPTs as structured data artifacts, this dataset enables a new class of compliance research beyond conventional source-based scanning. The dataset is openly licensed for reuse and can be incorporated into academic research, compliance‑tool benchmarking, and open‑source governance analysis. Related Framework:This dataset is designed to be used in conjunction with the TPN Intelligence Framework for Automated License and Compliance Risk Analysis, which formalizes methods for extracting and modeling compliance signals from Third‑Party Notices at scale. The framework is archived at Zenodo:https://doi.org/10.5281/zenodo.19099831本数据集由Devashri Datta编制，提供结构化、机器可读的第三方声明（Third Party Notices，TPT）报告，旨在支撑软件供应链合规、软件物料清单（Software Bill of Materials，SBOM）工作流以及自动化许可义务分析。数据集包含标准化TPT示例、贴合实际的开源组件条目、SPDX（Software Package Data Exchange）许可关联信息，以及可复现的格式化流水线。本数据集面向开展许可合规机制与软件供应链风险评估的研究人员、工具开发者与审计人员。本数据集在自动化许可智能、标准化TPT格式以及实现可复现的合规基准测试方面，展现了原创技术贡献。通过将TPT视作结构化数据工件，本数据集开创了一类超越传统基于源代码扫描的合规研究新范式。本数据集采用开放许可协议，允许二次复用，可被集成至学术研究、合规工具基准测试以及开源治理分析工作中。 相关框架：本数据集可与自动化许可与合规风险分析TPN智能框架结合使用，该框架系统化构建了大规模从第三方声明中提取并建模合规信号的方法。该框架已存档于Zenodo平台：https://doi.org/10.5281/zenodo.19099831