github.com/CycloneDX/sbom-utility@v0.16.0/test/cyclonedx/cdx-1-3-syntax-err-2.json (about) 1 { 2 "bomFormat": "CycloneDX", 3 "specVersion": "1.3", 4 "version": 1, 5 "serialNumber": "urn:uuid:1a2b3c4d-1234-abcd-9876-a3b4c5d6e7f9", 6 "metadata": { 7 "timestamp": "2020-08-03T03:20:53.771Z", 8 "tools": [ 9 { 10 "vendor": "IBM", 11 "name": "PTC Scanning Tool", 12 "version": "1.0.0-beta.1+0099", 13 "hashes": [ 14 { 15 "alg": "SHA-1", 16 "content": "96b2709e57c9c4e09a6fd66a8fd979844f69f08a" 17 } 18 ] 19 }, 20 { 21 "vendor": "IBM", 22 "name": "IBM Cloud Continuous Delivery - Code Risk Analyzer", 23 "version": "0.1.12", 24 "hashes": [ 25 { 26 "alg": "SHA-1", 27 "content": "96b2709e57c9c4e09a6fd66a8fd979844f69f08a" 28 } 29 ] 30 } 31 ], 32 "component": { 33 "type": "library", 34 "bom-ref": "pkg:npm/juice-shop@11.1.2", 35 "name": "juice-shop", 36 "version": "11.1.2", 37 "description": "Probably the most modern and sophisticated insecure web application", 38 "properties": [ 39 { 40 "name": "urn:ibm:names:identifier:deliverable:", 41 "value": "71C22290D7DB11EBAA175CFD3E629A2A" 42 }, 43 { 44 "name": "urn:ibm:names:identifier:product:", 45 "value": "5737-I23" 46 } 47 ], 48 "licenses": [ 49 { 50 "license": { 51 "id": "MIT" 52 } 53 } 54 ], 55 "purl": "pkg:npm/juice-shop@11.1.2", 56 "externalReferences": [ 57 { 58 "type": "website", 59 "url": "https://owasp-juice.shop" 60 }, 61 { 62 "type": "issue-tracker", 63 "url": "https://github.com/bkimminich/juice-shop/issues" 64 }, 65 { 66 "type": "vcs", 67 "url": "git+https://github.com/bkimminich/juice-shop.git" 68 } 69 ] 70 }, 71 "authors": [ 72 { 73 74 } 75 ], 76 "manufacture": { 77 "name": "Apache Software Foundation (ASF)", 78 "url": [ 79 "https://www.apache.org" 80 ], 81 "contact": [ 82 { 83 "name": "General", 84 "email": "apache@apache.org." 85 }, 86 { 87 "name": "Security vulnerability email", 88 "email": "security@apache.org" 89 } 90 ] 91 92 }, 93 "supplier": { 94 "name": "IBM", 95 "url": [ 96 "https://www.ibm.com" 97 ], 98 "contact": [ 99 { 100 "name": "TBD", 101 "email": "TBD", 102 "phone": "TBD" 103 } 104 ] 105 106 }, 107 "licenses": [ 108 { 109 "license": 110 { 111 "id": "Apache-2.0" 112 } 113 } 114 ] 115 }, 116 "components": [ 117 { 118 "type": "library", 119 "bom-ref": "pkg:npm/body-parser@1.19.0", 120 "name": "body-parser", 121 "version": "1.19.0", 122 "description": "Node.js body parsing middleware", 123 "properties" [ 124 { 125 "name": "TBD", 126 "value": "TBD" 127 } 128 ], 129 "hashes": [ 130 { 131 "alg": "SHA-1", 132 "content": "96b2709e57c9c4e09a6fd66a8fd979844f69f08a" 133 } 134 ], 135 "licenses": [ 136 { 137 "license": { 138 "id": "MIT" 139 } 140 } 141 ], 142 "purl": "pkg:npm/body-parser@1.19.0", 143 "externalReferences": [ 144 { 145 "type": "website", 146 "url": "https://github.com/expressjs/body-parser#readme" 147 } 148 ] 149 }, 150 { 151 "type": "application", 152 "bom-ref": "pkg:TBD", 153 "purl": "pkg:ibm/www.ibm.com/fixcentral/apiconnect@10.0.4.0#TBD", 154 "name": "IBM API Connect 10.0.4.0", 155 "version": "10.0.4.0", 156 "description": "TBD", 157 "properties": [ 158 { 159 "name": "urn:ibm:names:ch:requirements:packaging:identifier:deliverable:", 160 "value": "1DWYIAMM<LDFLHNQDN49129000" 161 }, 162 { 163 "name": "TBD", 164 "value": "TBD" 165 } 166 ], 167 "hashes": [ 168 { 169 "alg": "SHA-1", 170 "content": "1111aaaa2222cccc3333dddd4444eeee5555ffff" 171 } 172 ], 173 "licenses": [ 174 { 175 "license": { 176 "id": "Apache-2.0" 177 } 178 } 179 ], 180 "externalReferences": [ 181 { 182 "type": "website", 183 "url": "https://www.ibm.com/mysupport/s/topic/0TO50000000IMpYGAW/api-connect" 184 } 185 ] 186 } 187 188 ], 189 "externalReferences": [ 190 { 191 "url": "https://www.example.com/", 192 "comment": "An example website as a URL", 193 "type": "website" 194 } 195 ] 196 }