This article has been indexed from Security on TechRepublic
In use for a decade as the de facto standard for communicating software bills of materials, SPDX formally becomes the internationally recognized ISO/IEC JTC 1 standard.
Read the original article: SPDX becomes internationally recognized standard