Home|About|Gaming cabinet|Archives|How it works|Starter sites

GeezerVison is showing spdx.dev — SPDX – Linux Foundation Projects Site

THE LINUX FOUNDATION PROJECTS

The System Package Data Exchange™ (SPDX®)

An open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases.

The SPDX specification is a freely available international open standard (ISO/IEC 5962:2021).

Learn

Learn more about the structure of SPDX and how to participate.

Use

Explore the ways that you can engage with SPDX.

Tools

SPDX workgroup tools and others you can use.

Areas of Interest

SPDX is organized in areas of interest or profiles focused on specific user needs.

Supported by These Foundations

Latest SPDX News

podence | Oct 12, 2026

And another Tool!

See the Tools page for more info Pitloom automates the generation of SPDX 3-compliant Software Bills of Materials (SBOMs) for Python applications and AI models.…

podence | Oct 5, 2026

4 New SPDX Tools in the Last 5 Weeks

Check out the Tools page for new additions: SBOMlyze- Apache-2.0 CLI and GitHub Action for reviewing SPDX, CycloneDX,and Syft SBOM changes. sbomqs- Comprehensive SBOM quality…

SPDX Supporters

Amazon Web Services

Anchore

Antmicro

Apiiro

Arm

Bitergia

Bosch

Caict

Canvass Labs

Cariad

Chain Guard

Cisco

Cybertrust

DATADOG

DPDK

Dynatrace

Eclipse

Epam

Fortress

Fossa

Foundries IO

Google

Guide Rails

Here

Hewlett Packard

Hitachi

Huawei

IBM

Intel

Kusari

Laird

Manifest

Microsoft

MIT Connection Science

Mitre

NexB

OpenEuler

Palo Alto

Qazaq Open Source Initiative (QOSI)

Red Hat

Rezilion

RISCV

SAP

Scania

Shebash

Siemens

Snyk

Sonatype

Source Auditor

Synopsys

Texas Instruments

The Walt Disney Company

Tidelift

TNG

VMWare

Windriver

Wipro

Xilinx

Yocto