An open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases.
The SPDX specification is a freely available international open standard (ISO/IEC 5962:2021).
SPDX is organized in areas of interest or profiles focused on specific user needs.
Bob Martin did a great job getting two articles into the August 2026 Journal of Innovation that explore how SPDX can help make supply-chain information…
Recently Bob Martin and a colleague published the paper "Leveraging SBOMs Throughout the Enterprise SDLC" that examines how enterprises can leverage SBOMs throughout the full…