Tooling for analysing dependency licenses

[tecosaur]

Oh, I’ve just come across another relevant post/package:

[ANN] PkgToSoftwareBOM v0.1.10: Package License now included in the SBOM

Version 0.1.10 of the PkgToSoftwareBOM.jl package has been released. PkgToSoftwareBOM.jl produces a Software Bill of Materials (SBOM) describing your Julia environment. At this time, the SBOM produced is in the (SPDX) format. Contributions to support other SBOM formats are welcome. I created PkgToSoftwareBOM.jl to help the Julia ecosystem get prepared for the emerging future of software supply chain security. If we want to see Julia adoption to continue to grow, then we need to be able to eas…