github.com/CycloneDX/sbom-utility@v0.16.0/test/custom/cdx-1-3-test-custom-invalid-composition-components.json (about)

     1  {
     2  	"bomFormat": "CycloneDX",
     3  	"specVersion": "1.3",
     4  	"version": 1,
     5  	"serialNumber": "urn:uuid:1a2b3c4d-1234-abcd-9876-a3b4c5d6e7e0",
     6  	"metadata": {
     7  		"timestamp": "2021-04-14T07:20:00.000Z",
     8  		"component": {
     9  			"type": "application",
    10  			"bom-ref": "pkg:app/sample@2.0.0",
    11  			"purl": "pkg:app/sample@2.0.0",
    12  			"name": "sample app",
    13  			"version": "2.0.0",
    14  			"description": "Sample application"
    15  		}
    16  	},
    17  	"components": [
    18  		{
    19  			"type": "library",
    20  			"bom-ref": "pkg:npm/libraryA@1.0.0",
    21  			"purl": "pkg:npm/libraryA@1.0.0",
    22  			"name": "Library A",
    23  			"version": "1.0.0",
    24  			"description": "Library A description",
    25  			"components": [
    26  				{
    27  					"type": "library",
    28  					"bom-ref": "pkg:npm/bad-nest@1.0.0",
    29  					"purl": "pkg:npm/bad-nest@1.0.0",
    30  					"name": "bad nest",
    31  					"version": "1.0.0",
    32  					"description": "Bad nested library"
    33  				}
    34  			]
    35  		},
    36  		{
    37  			"type": "library",
    38  			"bom-ref": "pkg:npm/libraryB@1.0.0",
    39  			"purl": "pkg:npm/libraryB@1.0.0",
    40  			"name": "Library B",
    41  			"version": "1.0.0",
    42  			"description": "Library B description."
    43  		}
    44  	]
    45  }