For private usage no one gives a shit about SBOM, but for enterprise usage it's absolutely required.
Which is pretty much the norm.
Nobody cares, it's just another checkbox/policy. Security team is just another compliance department. It does not bring in money.
This. Thanks for highlight it!
I don’t see how anyone can «sell» this information when it’s literally available for free already.
It's a channel for OSS projects to get money for corporate funding. Not all standard procedures allow for making up shit that the vendor doesn't provide, so you go and pay for the vendor's SBOM shrug
I think this has been repeated thousands of times in history.