This is great news, very happy to see it and kudos to everyone involved. People may also be interested to know that we just merged SPDX SBOM generation into OpenEmbedded-Core, just before our feature

FWIW I've been wondering how we could show a relationship between Yocto Project and SPDX as we are a strong support of it so this looks timely in that regard assuming we'd be eligible as an associate