Replication Package for Wild SBOMs: a Large-scale Dataset of Software Bills of Materials from Public Code
DOI10.5281/zenodo.14250103Zenodo14250103MaRDI QIDQ6716144FDOQ6716144
Dataset published at Zenodo repository.
Stefano Zacchiroli, Luis Soeiro, Thomas Robert
Publication date: 30 November 2024
Copyright license: Creative Commons Attribution 4.0 International
Developers gain productivity by reusing readily available Free and Open Source Software (FOSS) components.Such practices also bring some difficulties, such as managing licensing, components and related security. One approach to handle those difficulties is to use Software Bill of Materials (SBOMs). While there have been studies on the readiness of practitioners to embrace SBOMs and on the SBOM tools ecosystem, a large scale study on SBOM practices based on SBOM files produced in the wild is still lacking. A starting point for such a study is a large dataset of SBOM files found in the wild. We introduce such a dataset, consisting of over 78 thousand unique SBOM files, deduplicated from those found in over 94 million repositories. We include metadata that contains the standard and format used, quality score generated by the tool sbomqs, number of revisions, filenames and provenance information. Finally, we give suggestions and examples of research that could bring new insights on assessing and improving SBOM real practices.For more details see the included README file and the companion paper: Wild SBOMs: a Large-scale Dataset of Software Bills of Materials from Public Code.
This page was built for dataset: Replication Package for Wild SBOMs: a Large-scale Dataset of Software Bills of Materials from Public Code
