SPDX
Standardized software-information exchange
What it does
SPDX provides a standard for describing software materials and related information, including packages, files, relationships, and license identifiers that organizations use when exchanging structured records about the composition and provenance of software they create or receive.
When to use it
When documenting delivered packages, consult specifications and validation tools to understand identifiers, relationships, and the fields included in an exchanged record.
