CycloneDX 1.5 has been released. SCIO should have an option to generate an SBOM in that format. The following link should be useful:
https://cyclonedx.org/guides/sbom/use_cases/#license-compliance
In particular, there is a property (new, I think) in licensing called evidence that could be an appropriate place to list "other" licenses that are found in a package. See attached image.
There is also a discussion about the 1.5 format here
aboutcode-org/scancode-toolkit#2987

CycloneDX 1.5 has been released. SCIO should have an option to generate an SBOM in that format. The following link should be useful:
https://cyclonedx.org/guides/sbom/use_cases/#license-compliance
In particular, there is a property (new, I think) in licensing called
evidencethat could be an appropriate place to list "other" licenses that are found in a package. See attached image.There is also a discussion about the 1.5 format here
aboutcode-org/scancode-toolkit#2987