Open Source Projects Could Monetize SBOM Fragments
2025-02-17
Scanning source code for licensing information is a laborious and often duplicated effort due to a lack of resource pooling among companies. This article proposes a solution: Open Source projects could sell SBOM fragments (components in CycloneDX or packages in SPDX with accurate licensing details). By sponsoring the project on GitHub, companies would gain access to continuously updated SBOM information, avoiding redundant work and ensuring licensing accuracy.