Software Supply Chain
3 data model standards serving software supply chain. Every one confirmed against its steward's own site.
| Standard | Steward | Layer | Access | Modernity |
|---|---|---|---|---|
| CoSWID / SWID tags | IETF / ISO/IEC 19770-2 | Information Model | spec sold | 55.0 Modernizing |
| OpenSSF Scorecard and SLSA provenance | OpenSSF | Information Model | open | — |
| Package URL (purl) | purl-spec community / OpenSSF | Code System | open | 79.6 Current |