SPDX (Software Package Data Exchange) is an open standard for communicating software bill of material information, including components, licenses, copyrights, and security references.
Why this server?
Generates standardized Software Bill of Materials (SBOM) reports in the SPDX format for security compliance and transparency.
Why this server?
Uses SPDX license identifiers to filter and validate the licensing of hardware IP cores imported from external repositories.
Why this server?
Generates Machine Learning Bill of Materials (MLBOM) in SPDX format for documenting AI agent dependencies and supply chain compliance.
Why this server?
Generates Software Bill of Materials (SBOM) reports in SPDX format for documenting software components and dependencies.
Why this server?
Used for the Software Bill of Materials (SBOM) format that lists all components included in the container image
Why this server?
Uses SPDX identifiers to perform license risk assessments, categorizing npm packages into risk levels from low to critical.
