Backed by many of the world’s largest companies for more than a decade, the Software Package Data Exchange specification is now an internationally recognized ISO/IEC JTC 1 standard. This comes during a transformational time for software and supply chain security.
The Linux Foundation announced Thursday that the SPDX specification has been published as ISO/IEC 5962:2021. The post SPDX Becomes New Standard for Open-Source Software, Security appeared first on LinuxInsider.
