- We should have an endpoint that can be queried by PURL and return an SBOM for the package. There is reusable code in ScanCode.io and DejaCode - We should also have a command line or function to export to federatedcode these SBOMs in batch - For a start only CycloneDX 1.7