Security · security identity · LF SPDX project — ISO/IEC 5962

SPDX

SPDX (Software Package Data Exchange) is an open, ISO/IEC 5962 standard for communicating software bill-of-materials information, including components, licenses, and copyrights. It supports license compliance and supply-chain security.

spdx.dev/The standard

LF SPDX project — ISO/IEC 5962Governing body · Linux Foundation

2011First published

3.0.1Current version

Yes — JSON SchemaMachine-readable schema · open

1providers in the catalog

Also known as Software Package Data Exchange, ISO/IEC 5962.

Providers that carry SPDX 1

These providers' own APIs.json profiles carry SPDX as a tag — the provider's statement that the standard is part of what it does. APIs.io has not verified the implementation on this page; the de facto profiles on this site are where that measurement exists. Ordered by Kin Score.

FOSSologythin · 35.5

Reading

The Linux Foundation Is the Home of Our API Specifications, and They Should Work Together 2026-06-30

Read from the API Evangelist standards directory, facts verified 2026-08-17. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.