# SPDX: the license-oriented SBOM format

Source: https://libwatch.com/en/glossary/spdx

Glossary · SPDX

The Linux Foundation's standard, recognized as an ISO standard.

Updated October 22, 2026 · 3-minute read

In one sentence

SPDX (Software Package Data Exchange) is an SBOM format from the Linux Foundation, historically focused on licenses.

## What it contains

The packages in a piece of software, their versions, their licenses and their relationships.

## Where it's used

Open source compliance, and exchanges with customers or auditors.

## And LibWatch?

LibWatch [exports your projects to SPDX 2.3](/en/features/sbom-export), in JSON: the latest version of the 2.x series, and the one tools read most (SPDX 3.0 came out in 2024).

## See also

- Glossary
### [CycloneDX](/en/glossary/cyclonedx)

The security-oriented format.

- Glossary
### [SBOM](/en/glossary/sbom)

The software bill of materials.

- Glossary
### [SCA](/en/glossary/sca)

Composition analysis.

## Export a project to SPDX.

[Try it for 14 days](https://app.libwatch.com/users/sign_up?source=glossary_spdx)