3 ms·ISO establishes SBOM standard for open source development with SPDX2 points by CrankyBear 5y ago