diff --git a/.gitignore b/.gitignore
index 7d2d158d..b3b29406 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,6 +20,9 @@ test-complete-app/.gradle
 test-complete-app-mlDeploy/build
 test-complete-app-mlDeploy/.gradle
 
+# Generated files for publishing to npm
+marklogic-*.spdx.json
+
 # Compiled TypeScript test files
 test-typescript/*.js
 
diff --git a/package.json b/package.json
index f34be307..faa5b9c1 100644
--- a/package.json
+++ b/package.json
@@ -13,11 +13,13 @@
     "README.md",
     "NOTICE.txt",
     "LICENSE.txt",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "marklogic-*.spdx.json"
   ],
   "scripts": {
     "doc": "jsdoc -c jsdoc.json lib/*.js README.md",
     "lint": "gulp lint",
+    "prepublishOnly": "cp sbom.spdx.json \"marklogic-${npm_package_version}.spdx.json\"",
     "pretest:typescript": "npm run test:compile",
     "test:types": "tsc --noEmit",
     "test:compile": "tsc test-typescript/*-runtime.test.ts",