Yocto: why static libraries are a nightmare!

A post-Halloween horror story about my struggles to generate SBOMs and be compliant with open source license attributions requirements.