[ValtteriL]

>Elixir releases now include a Source SBoM in CycloneDX 1.6 or later and SPDX 2.3 or later formats.

Having the $lang_ecosystem address this sounds godsent. Unfortunately we don't use Elixir at $work.