github.com/CycloneDX/sbom-utility@v0.16.0/examples/spdx/example2/example2-src.json (about)

     1  {
     2    "SPDXID" : "SPDXRef-DOCUMENT",
     3    "spdxVersion" : "SPDX-2.2",
     4    "creationInfo" : {
     5      "created" : "2021-08-26T01:47:00Z",
     6      "creators" : [ "Person: Steve Winslow (steve@swinslow.net)", "Tool: github.com/spdx/tools-golang/builder", "Tool: github.com/spdx/tools-golang/idsearcher" ]
     7    },
     8    "name" : "hello-src",
     9    "dataLicense" : "CC0-1.0",
    10    "documentNamespace" : "https://swinslow.net/spdx-examples/example2/hello-src-v3",
    11    "documentDescribes" : [ "SPDXRef-Package-hello-src" ],
    12    "packages" : [ {
    13      "SPDXID" : "SPDXRef-Package-hello-src",
    14      "copyrightText" : "NOASSERTION",
    15      "downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example2/content/src",
    16      "filesAnalyzed" : true,
    17      "hasFiles" : [ "SPDXRef-Makefile", "SPDXRef-hello-src" ],
    18      "licenseConcluded" : "NOASSERTION",
    19      "licenseDeclared" : "GPL-3.0-or-later",
    20      "licenseInfoFromFiles" : [ "GPL-3.0-or-later" ],
    21      "name" : "hello-src",
    22      "packageVerificationCode" : {
    23        "packageVerificationCodeValue" : "c6cb0949d7cd7439fce8690262a0946374824639"
    24      }
    25    } ],
    26    "files" : [ {
    27      "SPDXID" : "SPDXRef-Makefile",
    28      "checksums" : [ {
    29        "algorithm" : "SHA1",
    30        "checksumValue" : "69a2e85696fff1865c3f0686d6c3824b59915c80"
    31      }, {
    32        "algorithm" : "SHA256",
    33        "checksumValue" : "5da19033ba058e322e21c90e6d6d859c90b1b544e7840859c12cae5da005e79c"
    34      }, {
    35        "algorithm" : "MD5",
    36        "checksumValue" : "559424589a4f3f75fd542810473d8bc1"
    37      } ],
    38      "copyrightText" : "NOASSERTION",
    39      "fileName" : "/Makefile",
    40      "fileTypes" : [ "SOURCE" ],
    41      "licenseConcluded" : "GPL-3.0-or-later",
    42      "licenseInfoInFiles" : [ "GPL-3.0-or-later" ]
    43    }, {
    44      "SPDXID" : "SPDXRef-hello-src",
    45      "checksums" : [ {
    46        "algorithm" : "SHA1",
    47        "checksumValue" : "20862a6d08391d07d09344029533ec644fac6b21"
    48      }, {
    49        "algorithm" : "SHA256",
    50        "checksumValue" : "b4e5ca56d1f9110ca94ed0bf4e6d9ac11c2186eb7cd95159c6fdb50e8db5a823"
    51      }, {
    52        "algorithm" : "MD5",
    53        "checksumValue" : "935054fe899ca782e11003bbae5e166c"
    54      } ],
    55      "copyrightText" : "Copyright Contributors to the spdx-examples project.",
    56      "fileName" : "/hello.c",
    57      "fileTypes" : [ "SOURCE" ],
    58      "licenseConcluded" : "GPL-3.0-or-later",
    59      "licenseInfoInFiles" : [ "GPL-3.0-or-later" ]
    60    } ],
    61    "relationships" : [ {
    62      "spdxElementId" : "SPDXRef-DOCUMENT",
    63      "relatedSpdxElement" : "SPDXRef-Package-hello-src",
    64      "relationshipType" : "DESCRIBES"
    65    }, {
    66      "spdxElementId" : "SPDXRef-Makefile",
    67      "relatedSpdxElement" : "SPDXRef-Package-hello-src",
    68      "relationshipType" : "BUILD_TOOL_OF"
    69    } ]
    70  }