SPDX 3.0

Hey SBOM enthusiasts 👋, If you’ve been tracking the SBOM standards space, by now you would have probably known that SPDX 3.0 is a big enhacement. It’s not just another version bump from SPDX:2.3 to SPDX:2.4, instead it’s a fundamental rethinking of how SBOM data will be modeled, serialized, and shared. With its element-based architecture, JSON-LD serialization, and richer relationship modeling, SPDX 3.0 is built for the scale and complexity of modern software supply chains. ...