Please follow https://www.ntia.doc.gov/blog/2018/ntia-launches-initiative-improve-software-component-transparency.