cmake-spdx (https://github.com/swinslow/cmake-spdx) utilizes CMake File API (https://cmake.org/cmake/help/latest/manual/cmake-file-api.7.html) to query, observe, and parse information about the build process to allow the tool to create an SPDX SBOM file. While CMake could be unaware of some dependencies and files, and is not a perfect solution, it is a step toward SBOM compliance that many software packages will utilize. GNU Make should provide an API with similar functionality to CMake File API, which would allow tools to generate manifests such as SPDX SBOM. This will allow better and easier visibility into the licenses used by packages built by GNU Make.