Note: This question is submitted on behalf of an anonymous contributor.
Automotive SBOM requires the Concluded license field, while the Declared license field is optional.
Could you explain the rationale or intent behind this design?
While it is understandable that identifying all relevant licenses is important, there is also a need to keep SBOM generation practical and operationally simple. Clarification on the expected usage and balance between completeness and simplicity would be helpful.
Note: This question is submitted on behalf of an anonymous contributor.
Automotive SBOM requires the Concluded license field, while the Declared license field is optional.
Could you explain the rationale or intent behind this design?
While it is understandable that identifying all relevant licenses is important, there is also a need to keep SBOM generation practical and operationally simple. Clarification on the expected usage and balance between completeness and simplicity would be helpful.