diff --git a/.reuse/dep5 b/.reuse/dep5
deleted file mode 100644
index 73f44d0..0000000
--- a/.reuse/dep5
+++ /dev/null
@@ -1,8 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: skeleton
-Upstream-Contact: Steffen Vogel <post@steffenvogel.de>
-Source: https://github.com/cunicu/skeleton
-
-Files: go.sum .renovaterc.json flake.lock
-Copyright: 2023 Steffen Vogel <post@steffenvogel.de>
-License: Apache-2.0
diff --git a/REUSE.toml b/REUSE.toml
new file mode 100644
index 0000000..3414566
--- /dev/null
+++ b/REUSE.toml
@@ -0,0 +1,10 @@
+version = 1
+SPDX-PackageName = "skeleton"
+SPDX-PackageSupplier = "Steffen Vogel <post@steffenvogel.de>"
+SPDX-PackageDownloadLocation = "https://github.com/cunicu/skeleton"
+
+[[annotations]]
+path = ["go.sum", ".renovaterc.json", "flake.lock"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2023 Steffen Vogel <post@steffenvogel.de>"
+SPDX-License-Identifier = "Apache-2.0"