github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/usecases/cdx-use-case-package-evaluation.json (about)

     1  {
     2      "bomFormat":"CycloneDX",
     3      "specVersion":"1.4",
     4      "serialNumber":"urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79",
     5      "version":1,
     6      "components":[
     7          {
     8              "type":"library",
     9              "group":"org.apache.tomcat",
    10              "name":"tomcat-catalina",
    11              "version":"9.0.14",
    12              "purl":"pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.14"
    13          },
    14          {
    15              "type":"library",
    16              "group":"org.acme",
    17              "name":"card-verifier",
    18              "version":"1.0.2",
    19              "purl":"pkg:maven/org.acme/card-verifier@1.0.2?repository_url=repo.acme.org/maven"
    20          }
    21      ]
    22  }