In case you haven’t heard, the Linux Foundation develops and promotes SPDX – a standard for documenting the external components used in your software. This standard covers the things that a simple “ingredients label” would not. Usage and licensing of components (which can be far more fluid than one may expect), origins of components, and… Continue reading Two Dandy Queries for SPDX