Skip to main content

Open source project

SPDX

The Software Package Data Exchange (SPDX) is an open standard for SBOM, license, and metadata exchange in software supply chains.

Unclaimed Listing. Maintain this project? Claim it, free

What this project record adds to its repository

The repository shows the code. This record adds who stands behind the project and which companies build on it, so an agent can judge a dependency, not just find one.

Who maintains it

The owning organization (The Linux Foundation) as a record of its own, linked to the repository.

What's around it

Related projects (SPDX Tools and others) and the articles that mention it, with their sources.

Get this project

The same record, four ways in. No key needed to try it.

MCP

curl -X POST https://mcp.decisioninsights.ai/api/mcp-public \
  -H "content-type: application/json" \
  -H "accept: application/json, text/event-stream" \
  -d '{"id":1,"jsonrpc":"2.0","method":"tools/call","params":{"arguments":{"slug":"spdx"},"name":"di_get_project"}}'

REST

GET https://api.decisioninsights.ai/api/public/v1/projects/b860ed0f-948d-4718-88f4-a1c75ed533bd

CLI

di get-project --slug spdx

JSON-LD

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/registry/",
        "name": "Registry",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/projects/",
        "name": "Projects",
        "position": 3
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/registry/linux-foundation/",
        "name": "The Linux Foundation",
        "position": 4
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/projects/spdx/",
        "name": "SPDX",
        "position": 5
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/projects/spdx/#project",
    "@type": "SoftwareSourceCode",
    "additionalProperty": [
      {
        "@type": "PropertyValue",
        "name": "Related projects",
        "propertyID": "https://decisioninsights.ai/ns#relatedProjects",
        "value": [
          {
            "@id": "https://decisioninsights.ai/projects/spdx-tools/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/spdx-tools/",
            "name": "SPDX Tools"
          },
          {
            "@id": "https://decisioninsights.ai/projects/syft/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/syft/",
            "name": "Syft"
          },
          {
            "@id": "https://decisioninsights.ai/projects/materialx/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/materialx/",
            "name": "MaterialX"
          },
          {
            "@id": "https://decisioninsights.ai/projects/fossology/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/fossology/",
            "name": "FOSSology"
          },
          {
            "@id": "https://decisioninsights.ai/projects/open-switch-opx/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/open-switch-opx/",
            "name": "Open Switch (OPX)"
          },
          {
            "@id": "https://decisioninsights.ai/projects/software-discovery-tool/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/software-discovery-tool/",
            "name": "Software Discovery Tool"
          },
          {
            "@id": "https://decisioninsights.ai/projects/odpi/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/odpi/",
            "name": "ODPi"
          },
          {
            "@id": "https://decisioninsights.ai/projects/open-source-security-foundation/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-security-foundation/",
            "name": "Open Source Security Foundation"
          }
        ]
      },
      {
        "@type": "PropertyValue",
        "name": "Related organizations",
        "propertyID": "https://decisioninsights.ai/ns#relatedOrganizations",
        "value": [
          {
            "@id": "https://decisioninsights.ai/registry/spdx/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/spdx/",
            "name": "SPDX"
          },
          {
            "@id": "https://decisioninsights.ai/registry/lineaje/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/lineaje/",
            "name": "Lineaje"
          },
          {
            "@id": "https://decisioninsights.ai/registry/synopsys/black-duck-software/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/synopsys/black-duck-software/",
            "name": "Black Duck Software"
          },
          {
            "@id": "https://decisioninsights.ai/registry/cybeats/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/cybeats/",
            "name": "Cybeats"
          },
          {
            "@id": "https://decisioninsights.ai/registry/npm-inc/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/npm-inc/",
            "name": "npm, Inc."
          },
          {
            "@id": "https://decisioninsights.ai/registry/mend/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/mend/",
            "name": "Mend.io"
          },
          {
            "@id": "https://decisioninsights.ai/registry/sonatype/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/sonatype/",
            "name": "Sonatype"
          },
          {
            "@id": "https://decisioninsights.ai/registry/anchore/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/anchore/",
            "name": "Anchore"
          }
        ]
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
      "name": "The Linux Foundation"
    },
    "dateModified": "2026-08-27T03:10:32Z",
    "description": "The Software Package Data Exchange (SPDX) is an open standard for SBOM, license, and metadata exchange in software supply chains.",
    "keywords": [
      "Open Source",
      "Bill of Materials",
      "Compliance",
      "Components",
      "Continuous Integration and Continuous Deployment",
      "IT Governance",
      "JSON",
      "Metadata",
      "Open Source",
      "Resource Description Framework",
      "Software",
      "Supply Chain"
    ],
    "knowsAbout": [
      {
        "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
        "name": "Cybersecurity"
      },
      {
        "@id": "https://decisioninsights.ai/term/bill-of-materials-bom/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/bill-of-materials-bom/",
        "name": "Bill of Materials"
      },
      {
        "@id": "https://decisioninsights.ai/term/compliance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
        "name": "Compliance"
      },
      {
        "@id": "https://decisioninsights.ai/term/components/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/components/",
        "name": "Components"
      },
      {
        "@id": "https://decisioninsights.ai/term/continuous-integration-and-continuous-deployment-cicd/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/continuous-integration-and-continuous-deployment-cicd/",
        "name": "Continuous Integration and Continuous Deployment"
      },
      {
        "@id": "https://decisioninsights.ai/term/it-governance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/it-governance/",
        "name": "IT Governance"
      },
      {
        "@id": "https://decisioninsights.ai/term/json/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/json/",
        "name": "JSON"
      },
      {
        "@id": "https://decisioninsights.ai/term/metadata/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/metadata/",
        "name": "Metadata"
      },
      {
        "@id": "https://decisioninsights.ai/term/open-source/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/open-source/",
        "name": "Open Source"
      },
      {
        "@id": "https://decisioninsights.ai/term/resource-description-framework-rdf/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/resource-description-framework-rdf/",
        "name": "Resource Description Framework"
      },
      {
        "@id": "https://decisioninsights.ai/term/software/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/software/",
        "name": "Software"
      },
      {
        "@id": "https://decisioninsights.ai/term/supply-chain/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain/",
        "name": "Supply Chain"
      }
    ],
    "mainEntityOfPage": "https://decisioninsights.ai/projects/spdx/",
    "maintainer": {
      "@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
      "name": "The Linux Foundation"
    },
    "name": "SPDX",
    "publisher": {
      "@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
      "name": "The Linux Foundation"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "FAQPage",
    "mainEntity": [
      {
        "@type": "Question",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "The Software Package Data Exchange (SPDX) is an open standard for SBOM, license, and metadata exchange in software supply chains."
        },
        "name": "What is SPDX?"
      }
    ]
  }
]

Is this your company? Get structured data for your own pages

The CLI command and the REST call for this record need a free account: run di login, or send your OAuth token. Over MCP it is free with none.

Connect your agent (MCP) REST API and CLI docs

How an agent can check this project

The check What the record shows Where it is in the data
Someone stands behind it Maintained under The Linux Foundation maintainer
View the raw record (JSON-LD) 
[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/registry/",
        "name": "Registry",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/projects/",
        "name": "Projects",
        "position": 3
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/registry/linux-foundation/",
        "name": "The Linux Foundation",
        "position": 4
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/projects/spdx/",
        "name": "SPDX",
        "position": 5
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/projects/spdx/#project",
    "@type": "SoftwareSourceCode",
    "additionalProperty": [
      {
        "@type": "PropertyValue",
        "name": "Related projects",
        "propertyID": "https://decisioninsights.ai/ns#relatedProjects",
        "value": [
          {
            "@id": "https://decisioninsights.ai/projects/spdx-tools/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/spdx-tools/",
            "name": "SPDX Tools"
          },
          {
            "@id": "https://decisioninsights.ai/projects/syft/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/syft/",
            "name": "Syft"
          },
          {
            "@id": "https://decisioninsights.ai/projects/materialx/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/materialx/",
            "name": "MaterialX"
          },
          {
            "@id": "https://decisioninsights.ai/projects/fossology/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/fossology/",
            "name": "FOSSology"
          },
          {
            "@id": "https://decisioninsights.ai/projects/open-switch-opx/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/open-switch-opx/",
            "name": "Open Switch (OPX)"
          },
          {
            "@id": "https://decisioninsights.ai/projects/software-discovery-tool/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/software-discovery-tool/",
            "name": "Software Discovery Tool"
          },
          {
            "@id": "https://decisioninsights.ai/projects/odpi/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/odpi/",
            "name": "ODPi"
          },
          {
            "@id": "https://decisioninsights.ai/projects/open-source-security-foundation/#project",
            "@type": "SoftwareSourceCode",
            "mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-security-foundation/",
            "name": "Open Source Security Foundation"
          }
        ]
      },
      {
        "@type": "PropertyValue",
        "name": "Related organizations",
        "propertyID": "https://decisioninsights.ai/ns#relatedOrganizations",
        "value": [
          {
            "@id": "https://decisioninsights.ai/registry/spdx/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/spdx/",
            "name": "SPDX"
          },
          {
            "@id": "https://decisioninsights.ai/registry/lineaje/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/lineaje/",
            "name": "Lineaje"
          },
          {
            "@id": "https://decisioninsights.ai/registry/synopsys/black-duck-software/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/synopsys/black-duck-software/",
            "name": "Black Duck Software"
          },
          {
            "@id": "https://decisioninsights.ai/registry/cybeats/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/cybeats/",
            "name": "Cybeats"
          },
          {
            "@id": "https://decisioninsights.ai/registry/npm-inc/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/npm-inc/",
            "name": "npm, Inc."
          },
          {
            "@id": "https://decisioninsights.ai/registry/mend/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/mend/",
            "name": "Mend.io"
          },
          {
            "@id": "https://decisioninsights.ai/registry/sonatype/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/sonatype/",
            "name": "Sonatype"
          },
          {
            "@id": "https://decisioninsights.ai/registry/anchore/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/anchore/",
            "name": "Anchore"
          }
        ]
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
      "name": "The Linux Foundation"
    },
    "dateModified": "2026-08-27T03:10:32Z",
    "description": "The Software Package Data Exchange (SPDX) is an open standard for SBOM, license, and metadata exchange in software supply chains.",
    "keywords": [
      "Open Source",
      "Bill of Materials",
      "Compliance",
      "Components",
      "Continuous Integration and Continuous Deployment",
      "IT Governance",
      "JSON",
      "Metadata",
      "Open Source",
      "Resource Description Framework",
      "Software",
      "Supply Chain"
    ],
    "knowsAbout": [
      {
        "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
        "name": "Cybersecurity"
      },
      {
        "@id": "https://decisioninsights.ai/term/bill-of-materials-bom/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/bill-of-materials-bom/",
        "name": "Bill of Materials"
      },
      {
        "@id": "https://decisioninsights.ai/term/compliance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
        "name": "Compliance"
      },
      {
        "@id": "https://decisioninsights.ai/term/components/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/components/",
        "name": "Components"
      },
      {
        "@id": "https://decisioninsights.ai/term/continuous-integration-and-continuous-deployment-cicd/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/continuous-integration-and-continuous-deployment-cicd/",
        "name": "Continuous Integration and Continuous Deployment"
      },
      {
        "@id": "https://decisioninsights.ai/term/it-governance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/it-governance/",
        "name": "IT Governance"
      },
      {
        "@id": "https://decisioninsights.ai/term/json/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/json/",
        "name": "JSON"
      },
      {
        "@id": "https://decisioninsights.ai/term/metadata/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/metadata/",
        "name": "Metadata"
      },
      {
        "@id": "https://decisioninsights.ai/term/open-source/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/open-source/",
        "name": "Open Source"
      },
      {
        "@id": "https://decisioninsights.ai/term/resource-description-framework-rdf/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/resource-description-framework-rdf/",
        "name": "Resource Description Framework"
      },
      {
        "@id": "https://decisioninsights.ai/term/software/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/software/",
        "name": "Software"
      },
      {
        "@id": "https://decisioninsights.ai/term/supply-chain/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain/",
        "name": "Supply Chain"
      }
    ],
    "mainEntityOfPage": "https://decisioninsights.ai/projects/spdx/",
    "maintainer": {
      "@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
      "name": "The Linux Foundation"
    },
    "name": "SPDX",
    "publisher": {
      "@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
      "name": "The Linux Foundation"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "FAQPage",
    "mainEntity": [
      {
        "@type": "Question",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "The Software Package Data Exchange (SPDX) is an open standard for SBOM, license, and metadata exchange in software supply chains."
        },
        "name": "What is SPDX?"
      }
    ]
  }
]