license License discovery, classification, SPDX evaluation, component enumeration and evidence, shared by melange and the Chainguard platform.