Security seems to be the main reason SBOMS are being discussed at the moment. But, I found them invaluable when doing diligence paperwork for large custom enter

Security seems to be the main reason SBOMS are being discussed at the moment. But, I found them invaluable when doing diligence paperwork for large custom enterprise contracts and fundraising: often these contracts want a list of all software components and their licenses. FWIW, we used a hacky and mostly accurate tool[1] to put bill of material JSON files in many of our projects for this purpose. [1]: https://github.com/coreos/license-bill-of-materials https://github.com/coreos/license-bill-of-materials