The Bill of Materials Is Missing Most Parts

Software Bills of Materials Cannot Accurately Capture Transitive Dependencies in Open-Source Ecosystems

digital-sbom-open-source-transitive-dependency