A Software Bill of Materials (SBOM) document is a declaration of installed files, copyrights, licenses, versions, source repositories, and other relevant information about a Qt for MCUs installation. The SBOM documents facilitate supply chain management by sharing component information to users and other interested parties. The SBOM documents are especially useful for license compliance and security vulnerability management.

The currently delivered SBOM covers the source parts for the core library only. It contains the source file information and was created using the REUSE tool.

The Qt Online Installer places the SBOM documents in an sbom directory located in the installation directory of the respective Qt for MCUs version. For example, for the Qt Quick Ultralite 2.12.3, the SBOM documents are at:

<INSTALL_DIR>QtMCUs/2.12.3/sbom/

Related Topics

• SPDX 2.3