All registries
Industry consortium

SPDX Specification

SPDX

Security & cryptoCloud & APIs
WHY YOU NEED THIS

SBOM mandates (US EO 14028, EU CRA) reference SPDX — the license ID list and SBOM tag-value/JSON format spec.

What It Is

Software Package Data Exchange — ISO/IEC 5962 standard for SBOM format, license identifiers, and software supply chain transparency.

Taxonomy

By SPDX version: 2.3 · 3.0 · License list · SBOM profiles · Use cases

Top-Level Categories

SPDX 2.3 SBOMSPDX 3.0 modelLicense ListISO/IEC 5962Conformance profiles

Master Catalog

Sub-Indexes & Guides

Related Registry Sources

spdxsbomlicensesupply-chain