“The standard, which is being developed under the watch of the
SPDX Working Group of the Linux Foundation, is intended to provide
a ‘uniform approach for documenting and sharing metadata’.“It is hoped that developers will use SPDX to ‘communicate’
information relating to the content of software packages exchanged
with other organizations, a critically important step (so says
Black Duck) towards enabling supply chain efficiency and
collaboration.”
Black Duck Supports SPDX Beta Release
By
Adrian Bridgwater
Get the Free Newsletter!
Subscribe to Developer Insider for top news, trends, & analysis