Extend sbom-unifier to newer SBOM standards and formats

Extend the sbom-unifier framework to support newer SBOM standards such as SPDX 3.0 and other SBOM formats such as CycloneDX.

Background

The current implementation of sbom-unifier supports only SPDX 2.3 because that is the only format common to all integrated SBOM-generation tools. The authors state that the underlying approach is not inherently specific to SPDX 2.3, but extending the framework to newer standards and alternative formats remains unresolved. Supporting SPDX 3.0 and CycloneDX would broaden the framework's interoperability across SBOM ecosystems and generation tools.

References

Although the proposed approach is not specific to this format, extending the system to support newer standards such as SPDX 3.0 and other formats like CycloneDX remains future work.

— sbom-unifier: Integration Framework for Heterogeneous SBOMs  (2608.30708 - Moriwaki et al., 31 Aug 2026) in Section 7, Limitations