github.com/CycloneDX/sbom-utility@v0.16.0/test/cyclonedx/cdx-1-3-invalid-license-choice-oneof.json (about)

     1  {
     2        "bomFormat": "CycloneDX",
     3        "specVersion": "1.3",
     4        "version": 1,
     5        "serialNumber": "urn:uuid:1a2b3c4d-1234-abcd-9876-a3b4c5d6e7e0",
     6        "metadata": {
     7          "component": {
     8            "type": "application",
     9            "bom-ref": "pkg:app/sample@1.0.0",
    10            "purl": "pkg:app/sample@1.0.0",
    11            "name": "ACME Application",
    12            "version": "2.0.0",
    13            "description": "ACME sample application",
    14            "licenses": [
    15              {
    16                "license": {
    17                  "id": "MIT",
    18                  "name": "MIT License"
    19                }
    20              }
    21            ]
    22          }
    23        }
    24      }