Resources
OpenChain CRA Checklist
OpenChain-Aligned CRA Compliance Requirements & Checklist - ISO/IEC 18974 Aligned - EU Regulation 2024/2847
Open reference ↗
CycloneDX
CycloneDX 1.7 Specification
The open standard for software supply chain component inventories, services, vulnerabilities, and attestations.
Open reference ↗
SPDX
SPDX 3.0.1 Specification
A Linux Foundation project and ISO standard for communicating software bill of materials information.
Open reference ↗