This FOSSBazaar working group is defining a specification to enable companies and organizations to share license and component information (metadata) for software package and related content with the aim of facilitating license and other policy compliance.
Currently, the specification is private to those participating in the working group. We are working towards making it public Q4 2010. In the meantime, you can get an overview of SPDX from this article in Dr. Dobb's.