Export dependency list to (partial) SPDX / SWID

Problem to solve

Customers would like a Software Bill of Materials (SBoM) - could we support a partial (incomplete) export in industry standard formats?

Intended users

Further details

Proposal

Permissions and Security

Documentation

Availability & Testing

What does success look like, and how can we measure that?

What is the type of buyer?

Links / references