Beyond SBOMs: making license data actionable with ClearlyDefined

You&rsquo;re about to ship a product. Legal asks for the third-party notices, so you generate an SBOM, and half the dependencies come back as NOASSERTION . You can&rsquo;t put that in a NOTICE file, and legal won&rsquo;t sign off on it. I&rsquo;ve spent a lot of late nights writing those files by hand, so this is the talk I gave about the project that saves me from most of them: ClearlyDefined.