Lite Profile
summary
Current status of a Lite Profile pull request for SPDX: a minimal, industry-friendly subset based on SPDX Lite (adopted in SPDX 2.3 NXG) that enforces mandatory required elements so supply-chain teams can produce both human-readable and machine-readable SBOMs. Work includes a JSON schema for SPDX classes, element-by-element comparison with SPDX 2.3, resolving circular-reference issues in the spec, and a near-term GitHub PR after months of coordination with Japanese OpenChain contributors.
AI-written summary · about
related talks
07mTooling and Sharing Traceability Discussion
16mranslate FOSS licenses into code
31mSoftware Bill of Materials (SBoM) for dummies
53mDocumenting the Design of the Linux Kernel
23mPaying it Forward: Documenting your Open Hardware Module
46mIntroduction to Profiling
27mProduction Language Specification - Requirements for Multiple Usages
40mFHIR Profiling: Overview & Introduction