I want someone to build this: SBOM (Software Bill of Materials) are slowly becoming ubiquitus around the world due to regulation. I want to be able to aggregate all SBOMs within my company, have a small tool that scans my machine and creates a SBOM for all Open Source tools I use (e.g. Firefox, VLC etc.), uploads that to my corporate registry. This data is then submitted to a donation aggregator which analyzes those…
This is https://tidelift.com/ ! Others too, I think.
They used to be simple to understand, looking at their homepage today I have no idea what they are doing today but not what I'm looking for.