Software Package Data Exchange (SPDX)