%% You should probably cite rfc9393 instead of this I-D. @techreport{ietf-sacm-coswid-15, number = {draft-ietf-sacm-coswid-15}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-sacm-coswid/15/}, author = {Henk Birkholz and Jessica Fitzgerald-McKay and Charles Schmidt and David Waltermire}, title = {{Concise Software Identification Tags}}, pagetotal = 72, year = 2020, month = may, day = 1, abstract = {ISO/IEC 19770-2:2015 Software Identification (SWID) tags provide an extensible XML-based structure to identify and describe individual software components, patches, and installation bundles. SWID tag representations can be too large for devices with network and storage constraints. This document defines a concise representation of SWID tags: Concise SWID (CoSWID) tags. CoSWID supports the same features as SWID tags, as well as additional semantics that allow CoSWIDs to describe additional types of information, all in a more memory efficient format.}, }