logoalt Hacker News

h4ck_th3_pl4n3tyesterday at 10:09 AM0 repliesview on HN

That is literally how the CycloneDX SBOM packages work, well, after the fact and after the disclosure process.