> I don’t see how anyone can «sell» this information when it’s literally available for free already. It's a channel for OSS projects to get money for corporate

> I don’t see how anyone can «sell» this information when it’s literally available for free already. It's a channel for OSS projects to get money for corporate funding. Not all standard procedures allow for making up shit that the vendor doesn't provide, so you go and pay for the vendor's SBOM shrug