KushBitx has self-certified conformance to OpenChain ISO/IEC 5230:2020 and ISO/IEC 18974:2023 for a narrowly defined supplied-open-source software program. The scope covers its publicly distributed @kushbitx/sdk and directly related open-source components supplied with SpendGuard/AgentProof releases. Internal-only systems and third-party services consumed by KushBitx are outside that scope.
The program brings together assigned responsibilities, practical competency records, component inventories and software bills of materials (SBOMs), licence-compliance and security-assurance release checks, vulnerability monitoring, and a documented route to external open-source legal expertise when needed.
KushBitx’s self-certification and participation in the OpenChain community support continued improvement in the software supply-chain practices of the scoped program.
Learn More:
-
Website: https://kushbitx.com
-
Public package: https://www.npmjs.com/package/@kushbitx/sdk
