For in-house development, Software Bills of Materials (SBOMs) solve the problem for the wrong group of people. On the team that controls the code, they already have a SBOM, they just call it a maven or Pipfile. SBOMs solve a problem for senior management.
So you're going to get zippo organic adoption. If this all solved a problem small teams have (who doesn't want a convenient to use private pypi, or private npm?) They an org could get organic adoption & SBOMs as a side effect.
♡ 0 ↻ 0