Meet the System Package Data Exchange: SPDX 3.0, with Profiles: https://thenewstack.io/introducing-spdx-30-and-profiles/ by @sjvn
With #SPDX 3.0, you can track not just software packages, but pretty much anything and everything. It's a game-changer. #OSSummit #Security