Research, experiments, and implementation notes filed under sbom.
GitHub's License Data Update Makes SBOM Reviews Less Noisy
GitHub is prioritizing registry license metadata in the dependency graph, which should make SBOMs and dependency review checks easier to trust.