About This Resource

A standard for describing software components and their relationships in a bill of materials. It also covers related information such as vulnerabilities, services, and other parts of a software supply chain.