2.4.3.1. Software Bill of Materials๏
Proximie publishes a Software Bill of Materials (SBOM) for the Proximie SDK: a machine-readable inventory of all PxSDK software components in SPDX 2.3 format, including transitive dependencies, license information, and supplier details. The SBOM can be used as software configuration and component-identification evidence (IEC 62304 ยง8.1.2) when certifying SDK-containing products.
How it is generated๏
The SBOM is generated automatically at release time and included in release packages, so that every released version of the Proximie SDK ships with an inventory that matches its exact contents.
Where to find it๏
The SBOM can be found either in the docs/certification/SBOMs directory of a release archive, or
in /usr/share/pxsdk/sboms/ after installation of our pxsdk-dev APT package.
Python deployments are covered by a dedicated SBOM for the python3-pxsdk package. It wraps the
C++ SBOM (so the full transitive native dependency graph is included) and adds the Python-specific
components: the CPython interpreter, the pybind11 framework, and the compiled extension module.
It can be found at docs/certification/SBOMs/python3-pxsdk.spdx.json in a release archive, or at
/usr/share/pxsdk/sboms/python3-pxsdk.spdx.json after installation of the python3-pxsdk APT
package.