software package data exchange (SPDX)

SoftwarePackage Data Exchange (SPDX) is a machine-readable exchange format for license information, components and copyrights. It is based on the Extensible Markup Language(XML) and, among other things, standardizes the license designations of open source software( OSS), since these are often used differently.

By standardizing the license designations for open source software, the SPDX standard contributes to standardization. SPDX files do not contain any information about the software architecture or about the use of the open source software. They stand however for the rules under which about advancements must be informed and the software.

The SPDX specifications were developed by the SPDX working group, which is located in the Linux Foundation. More than 20 different organizations have contributed the basics.