Security
SPDX
Abbreviation for Software Package Data Exchange
In short and in plain language
SPDX is an open format for listing the parts of a piece of software.
Computers can read these lists.
When a security hole becomes known, such a list helps. It shows which packages and parts are used in a shop.
Definition
SPDX is an open format for listing the components of a piece of software in a machine-readable way. Such bills of materials help to check which packages and components are used in a shop when a vulnerability becomes known.