Black Duck

In response to the growing number of cybersecurity crises, the White House issued an executive order requiring all software sold to the federal government to provide a "Software Bill of Materials" (SBOM)

• Like the ingredient list on a food label, this <strong class="text-secondary">SBOM</strong> lists the software's components, internal modules, and complete supply chain
• Software Package Data Exchange (SPDX) has become an international standard (ISO/IEC 5962:2021)