- Add npm script sbom:generate using CycloneDX - Add GitHub Actions workflow to auto-generate SBOM on release - Output both JSON and XML formats