Unverified50% confidenceFactExact time

The mainstream SBOM standards SPDX and CycloneDX primarily focus on packaged dependencies and have not yet adequately covered runtime SaaS API dependencies.

1

Sources

50%

Confidence

Long-term

Relevance

9/8/2026

First Seen

Sources

oxpecker: Pinpointing the Exact Lines of Code Broken by Vendor API Changes

Related Entities

SPDXconcept CycloneDXconcept SBOMconcept

Related Claims

UnverifiedSaaS模式的数据需上传至服务商云端，存在合规风险，与开源私有化部署形成本质区别63% similar UnverifiedSupabase wraps user authentication, file storage, and a visual operations dashboard on top of PostgreSQL; its MCP uses remote invocation and requires specifying the --transport http parameter during configuration.61% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/874613

API

curl https://kongchang.com/api/v1/knowledge/claims/874613

MCP

get_claim(id=874613)