**Tool name and link (must be open source)** (e.g. spdx-sbom-generator, https://github.com/opensbom-generator/spdx-sbom-generator)