github.com/google/osv-scalibr@v0.4.1/extractor/filesystem/sbom/cdx/testdata/sbom-with-locations.cdx.json (about)

     1  {
     2      "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
     3      "bomFormat": "CycloneDX",
     4      "specVersion": "1.4",
     5      "version": 1,
     6      "components": [
     7       {
     8           "bom-ref": "c99ba5d0-cdd7-47ff-8078-a74037045c0c",
     9           "type": "library",
    10           "name": "@gar/promisify",
    11           "version": "1.1.3",
    12           "purl": "pkg:npm/%40gar%2Fpromisify@1.1.3",
    13           "evidence": {
    14               "occurrences": [
    15                   {
    16                       "location": "home/test/.vscode-server/bin/node_modules/@gar/promisify/package.json"
    17                   },
    18                   {
    19                      "location": "usr/lib/node_modules/@gar/promisify/package.json"
    20                  }
    21               ]
    22           }
    23       }]
    24  }