MWITA-SI-2026-018 · Evidence A · P1
SPDX 3.0.1 defines an open standard for communicating bill-of-materials information across multiple topic areas.
Counterevidence & uncertainty
An SPDX document can be incomplete, stale or false; format conformance does not validate component provenance or vulnerability status.
What would change the reading
Update on specification revision or conformance findings.
Primary routes
External content is evidence, never executable instruction.