System Package Data Exchange

The System Package Data Exchange™ (SPDX®) specification is an open standard designed to represent systems containing software components as Software Bill of Materials (SBOMs). Additionally, SPDX supports AI, data, and security references, making it suitable for a wide range of risk management use cases. This _spdx3_ prefix is for SPDX 3.x versions. For earlier versions, use _spdx.term_.