All agencies that fund research should require that resulting publications include a Software Bill of Materials (SBOM) listing the software used in the research.
The groups, which represent tech and cybersecurity companies sometimes contracted by the government, say the proposals are too rigorous and inconsistent.