Spdx3

A NuGet library (.NET 8) for creating, reading, and writing Software Bills of Materials files in SPDX 3 format.

Note

SPDX3 is primarily intended for tool-writers who want to create their own SBOMs directly and want a compliant data model and serialization utilities to do that.
It's not a utility/tool for inspecting artifacts, deriving SBOM material, or otherwise generating SBOMs for things. However, you can write code do to that inspection/derivation/generation and use this library to hold, serialize, and deserialize the data.

This library provides:

• A C# object model for the entire SPDX3 spec
• Serialization and deserialization to/from JSON-LD format
• Validation
• Checking for Lite domain compliance
• A full list of pre-created ListedLicense objects that correspond to the SPDX License List

Documentation

Please see here