ISO/IEC 5962:2021 pdf download, Information technology — SPDX® Specification V2.2.1.
ISO/IEC 5962 defines a standard data format for communicating the component and metadata information associated with software packages. An SPDX document can be associated with a set of software packages, files or snippets and contains information about the software in the SPDX format described in this specification.