SPDX is the second Linux Foundation standard to receive ISO designation to manage supply chain security. It has also been employed by tech companies like Intel, Microsoft, and Sony for over ten years.
Openchain RSS
To control supply chains, Samsung has followed in the footsteps of companies following the OpenChain standard in the field of telecommunications, cloud computing, automotive, and consumer electronics.