4 ms·

This is definitely a sound business idea, for anyone (not only the actual developer od the Open Source software) to pursue. I disagree with the "needed only by

by zvr 2y ago

This is definitely a sound business idea, for anyone (not only the actual developer od the Open Source software) to pursue. I disagree with the "needed only by huge corporations" part -- present and forthcoming regulation will make this needed by everyone doing commercial transactions involving software.

kjok 2y ago
Are you referring to federal regulations? Would love to know the details.
- zvr 2y ago
  Well, you can start by taking a look at regulations that start mentioning SBOMs, at first recommending their existence and use and then moving to mandating them. Without looking things up, I can mention White House Executive Order 14028 (2021) and National Cybersecurity Strategy Implementation Plan (2023) in the US, EU's Cyber Resilience Act (2023), national legislation in Germany and Japan (2023-2024), etc.