News & Announcements
Oct 12, 2026
And another Tool!
See the Tools page for more info Pitloom automates the generation of SPDX 3-compliant Software Bills of Materials (SBOMs) for Python applications and AI models. It extracts metadata directly from common Python build backends (Flit, Hatchling, PDM, Poetry, setuptools, and uv_build) and leading AI model formats, including PyTorch, ONNX, Safetensors,…
Oct 5, 2026
4 New SPDX Tools in the Last 5 Weeks
Check out the Tools page for new additions: SBOMlyze- Apache-2.0 CLI and GitHub Action for reviewing SPDX, CycloneDX,and Syft SBOM changes. sbomqs- Comprehensive SBOM quality & compliance tool lynkctl- CLI SBOM generator tool that produces high-quality SPDX:3.0.1 (and CycloneDX) SBOMs from C/C++ and embedded firmware projects without executing the build.…
Sep 9, 2026
SPDX Articles in Journal of Innovation
Bob Martin did a great job getting two articles into the August 2026 Journal of Innovation that explore how SPDX can help make supply-chain information more trustworthy, usable, and actionable. “Regulatory Digital Product Passports as a Catalyst for U.S. Supply Chain Visibility” examines how EU Digital Product Passport requirements and…
Jun 30, 2026
Cool New Whitepaper
Recently Bob Martin and a colleague published the paper "Leveraging SBOMs Throughout the Enterprise SDLC" that examines how enterprises can leverage SBOMs throughout the full Software Development Lifecycle (SDLC) to support risk-informed decision-making, continuous monitoring, operational resilience, and regulatory compliance. Using a hypothetical enterprise named ACME, this paper walks through…
Jan 26, 2026
SPDX 3.1 Ontology and Schema Available for Review
The first release candidate for SPDX specification version 3.1 is now available. The SPDX 3.1 model expands beyond software to include safety, service, hardware, supply chain, and operations. Please note that this release candidate is intended for testing and validation. Some features may be modified or reverted before the final…
