[1] Home | Software Package Data Exchange (SPDX) ( ()) https://spdx.org/
[4] SPDX – Linux Foundation Projects Site, https://spdx.dev/
An open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases.
The SPDX specification is a freely available international open standard (ISO/IEC 5692:2021).
[2] Specifications | Software Package Data Exchange (SPDX) ( ()) https://spdx.org/specifications
[3] SPDX Specification 2.1 (web version) | Software Package Data Exchange (SPDX) ( ()) https://spdx.org/spdx-specification-21-web-version
[5] SPDX v3 Specification, , https://spdx.github.io/spdx-spec/v3.0/