Home ›Organizations ›spdx
SPDX @spdx
SPDX is an open standard for communicating SBOM information, including provenance, license, security, and other related information. ISO/IEC 5962:2021
About the organization
SPDX is an open standard for communicating SBOM information, including provenance, license, security, and other related information. ISO/IEC 5962:2021
Primary technologies & languages
Technical topics & focus areas
Participation years
Repositories on GitHublive from github.com/spdx, ranked by starsAll 86 repos
Various data formats for the SPDX License List including RDFa, HTML, Text, and JSON
Source XML and test text files for the SPDX License List
84 open issues · good place to start if you want to contributeThe System Package Data Exchange (SPDX) specification in Markdown and HTML formats.
111 open issues · good place to start if you want to contributeA Python library to parse, validate and create SPDX documents.
82 open issues · good place to start if you want to contributeCollection of Go packages to work with SPDX files
32 open issues · good place to start if you want to contributeExamples of SPDX files for software combinations
13 open issues · good place to start if you want to contributeSPDX Tools
27 open issues · good place to start if you want to contributeThe model for the information captured in SPDX version 3 standard.
192 open issues · good place to start if you want to contributeSPDX Command Line Tools using the Spdx-Java-Library
21 open issues · good place to start if you want to contributeValidate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
12 open issues · good place to start if you want to contribute