github.com/CycloneDX/sbom-utility@v0.16.0/examples/spdx/example1/example1.json (about)

     1  {
     2    "SPDXID" : "SPDXRef-DOCUMENT",
     3    "spdxVersion" : "SPDX-2.2",
     4    "creationInfo" : {
     5      "created" : "2021-08-26T01:46:00Z",
     6      "creators" : [ "Person: Steve Winslow (steve@swinslow.net)", "Tool: github.com/spdx/tools-golang/builder", "Tool: github.com/spdx/tools-golang/idsearcher" ]
     7    },
     8    "name" : "hello",
     9    "dataLicense" : "CC0-1.0",
    10    "documentNamespace" : "https://swinslow.net/spdx-examples/example1/hello-v3",
    11    "documentDescribes" : [ "SPDXRef-Package-hello" ],
    12    "packages" : [ {
    13      "SPDXID" : "SPDXRef-Package-hello",
    14      "copyrightText" : "NOASSERTION",
    15      "downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example1/content",
    16      "filesAnalyzed" : true,
    17      "hasFiles" : [ "SPDXRef-hello-binary", "SPDXRef-Makefile", "SPDXRef-hello-src" ],
    18      "licenseConcluded" : "GPL-3.0-or-later",
    19      "licenseDeclared" : "GPL-3.0-or-later",
    20      "licenseInfoFromFiles" : [ "GPL-3.0-or-later" ],
    21      "name" : "hello",
    22      "packageVerificationCode" : {
    23        "packageVerificationCodeValue" : "9d20237bb72087e87069f96afb41c6ca2fa2a342"
    24      }
    25    } ],
    26    "files" : [ {
    27      "SPDXID" : "SPDXRef-hello-binary",
    28      "checksums" : [ {
    29        "algorithm" : "SHA1",
    30        "checksumValue" : "20291a81ef065ff891b537b64d4fdccaf6f5ac02"
    31      }, {
    32        "algorithm" : "SHA256",
    33        "checksumValue" : "83a33ff09648bb5fc5272baca88cf2b59fd81ac4cc6817b86998136af368708e"
    34      }, {
    35        "algorithm" : "MD5",
    36        "checksumValue" : "08a12c966d776864cc1eb41fd03c3c3d"
    37      } ],
    38      "copyrightText" : "NOASSERTION",
    39      "fileName" : "/build/hello",
    40      "fileTypes" : [ "BINARY" ],
    41      "licenseConcluded" : "GPL-3.0-or-later",
    42      "licenseInfoInFiles" : [ "NOASSERTION" ]
    43    }, {
    44      "SPDXID" : "SPDXRef-hello-src",
    45      "checksums" : [ {
    46        "algorithm" : "SHA1",
    47        "checksumValue" : "20862a6d08391d07d09344029533ec644fac6b21"
    48      }, {
    49        "algorithm" : "SHA256",
    50        "checksumValue" : "b4e5ca56d1f9110ca94ed0bf4e6d9ac11c2186eb7cd95159c6fdb50e8db5a823"
    51      }, {
    52        "algorithm" : "MD5",
    53        "checksumValue" : "935054fe899ca782e11003bbae5e166c"
    54      } ],
    55      "copyrightText" : "Copyright Contributors to the spdx-examples project.",
    56      "fileName" : "/src/hello.c",
    57      "fileTypes" : [ "SOURCE" ],
    58      "licenseConcluded" : "GPL-3.0-or-later",
    59      "licenseInfoInFiles" : [ "GPL-3.0-or-later" ]
    60    }, {
    61      "SPDXID" : "SPDXRef-Makefile",
    62      "checksums" : [ {
    63        "algorithm" : "SHA1",
    64        "checksumValue" : "69a2e85696fff1865c3f0686d6c3824b59915c80"
    65      }, {
    66        "algorithm" : "SHA256",
    67        "checksumValue" : "5da19033ba058e322e21c90e6d6d859c90b1b544e7840859c12cae5da005e79c"
    68      }, {
    69        "algorithm" : "MD5",
    70        "checksumValue" : "559424589a4f3f75fd542810473d8bc1"
    71      } ],
    72      "copyrightText" : "NOASSERTION",
    73      "fileName" : "/src/Makefile",
    74      "fileTypes" : [ "SOURCE" ],
    75      "licenseConcluded" : "GPL-3.0-or-later",
    76      "licenseInfoInFiles" : [ "GPL-3.0-or-later" ]
    77    } ],
    78    "relationships" : [ {
    79      "spdxElementId" : "SPDXRef-DOCUMENT",
    80      "relatedSpdxElement" : "SPDXRef-Package-hello",
    81      "relationshipType" : "DESCRIBES"
    82    }, {
    83      "spdxElementId" : "SPDXRef-hello-binary",
    84      "relatedSpdxElement" : "SPDXRef-hello-src",
    85      "relationshipType" : "GENERATED_FROM"
    86    }, {
    87      "spdxElementId" : "SPDXRef-hello-binary",
    88      "relatedSpdxElement" : "SPDXRef-Makefile",
    89      "relationshipType" : "GENERATED_FROM"
    90    }, {
    91      "spdxElementId" : "SPDXRef-Makefile",
    92      "relatedSpdxElement" : "SPDXRef-Package-hello",
    93      "relationshipType" : "BUILD_TOOL_OF"
    94    } ]
    95  }