Full glossary
Glossary · SPDX
SPDX: the license-oriented SBOM format
The Linux Foundation's standard, recognized as an ISO standard.
Updated · 3-minute read
In one sentence
SPDX (Software Package Data Exchange) is an SBOM format from the Linux Foundation, historically focused on licenses.
What it contains
The packages in a piece of software, their versions, their licenses and their relationships.
Where it's used
Open source compliance, and exchanges with customers or auditors.
And LibWatch?
LibWatch exports your projects to SPDX 2.3, in JSON: the latest version of the 2.x series, and the one tools read most (SPDX 3.0 came out in 2024).