SPDX 3.0 data fields

SPDX 3.0 is the latest version of the System Package Data Exchange specification, which standardizes the way software bill of materials (SBOM) information is communicated. Black Duck supports SBOMs in SPDX 3.0 format, providing detailed metadata for software packages, components, and associated security data.

More information on the data fields can be found on the SPDX specification page.