SBOMs should be a security staple in the software supply chain

Know the ingredients before mixing the code. Oh and pay open source maintainers for goodness' sake...

SCSW  The common analogy when talking about software bills of materials (SBOMs) is the list of ingredients found on food packages that lets consumers know what is in the potato chips they're about to eat.…

from The Register