https://minimalisterbaru.my.id/2022/06/28/all-about-software-security-spdx-becomes-new-standard-for-open-source-software-security/