github.com/nextlinux/gosbom@v0.81.1-0.20230627115839-1ff50c281391/gosbom/formats/spdxjson/test-fixtures/spdx/alpine-3.10.vendor.spdx.json (about)

     1  {
     2    "SPDXID": "SPDXRef-DOCUMENT",
     3    "spdxVersion": "SPDX-2.2",
     4    "creationInfo": {
     5      "created": "2022-01-18T22:16:16Z",
     6      "creators": [
     7        "Tool: vendor"
     8      ],
     9      "licenseListVersion": "3.8"
    10    },
    11    "name": "alpine:3.10",
    12    "dataLicense": "CC0-1.0",
    13    "documentNamespace": "https://spdx.org/spdxdocs/alpine-154c794c-4264-4e9f-a2ff-5c01bfbfc02c",
    14    "documentDescribes": [
    15      "SPDXRef-alpine-3.10"
    16    ],
    17    "packages": [
    18      {
    19        "name": "alpine",
    20        "SPDXID": "SPDXRef-alpine-3.10",
    21        "versionInfo": "3.10",
    22        "downloadLocation": "NOASSERTION",
    23        "filesAnalyzed": false,
    24        "licenseConcluded": "NOASSERTION",
    25        "licenseDeclared": "NOASSERTION",
    26        "copyrightText": "NOASSERTION"
    27      },
    28      {
    29        "name": "busybox",
    30        "SPDXID": "SPDXRef-busybox-1.30.1-r5",
    31        "versionInfo": "1.30.1-r5",
    32        "downloadLocation": "NOASSERTION",
    33        "filesAnalyzed": false,
    34        "licenseConcluded": "NOASSERTION",
    35        "licenseDeclared": "LicenseRef-7d19a72",
    36        "copyrightText": "NONE",
    37        "comment": "busybox:\n\twarning: No metadata for key: copyright\n\twarning: No metadata for key: download_url\n\twarning: No metadata for key: checksum\n\twarning: No metadata for key: pkg_licenses\n\twarning: No metadata for key: pkg_format\n\twarning: No metadata for key: src_name\n\twarning: No metadata for key: src_version\n"
    38      },
    39      {
    40        "name": "ssl_client",
    41        "SPDXID": "SPDXRef-ssl_client-1.30.1-r5",
    42        "versionInfo": "1.30.1-r5",
    43        "downloadLocation": "NOASSERTION",
    44        "filesAnalyzed": false,
    45        "licenseConcluded": "NOASSERTION",
    46        "licenseDeclared": "LicenseRef-de5acdd",
    47        "copyrightText": "NONE",
    48        "comment": "ssl_client:\n\twarning: No metadata for key: copyright\n\twarning: No metadata for key: download_url\n\twarning: No metadata for key: checksum\n\twarning: No metadata for key: pkg_licenses\n\twarning: No metadata for key: pkg_format\n\twarning: No metadata for key: src_name\n\twarning: No metadata for key: src_version\n"
    49      }
    50    ],
    51    "relationships": [
    52      {
    53        "spdxElementId": "SPDXRef-DOCUMENT",
    54        "relatedSpdxElement": "SPDXRef-alpine-3.10",
    55        "relationshipType": "DESCRIBES"
    56      },
    57      {
    58        "spdxElementId": "SPDXRef-9fb3aa2f8b",
    59        "relatedSpdxElement": "SPDXRef-busybox-1.30.1-r5",
    60        "relationshipType": "CONTAINS"
    61      },
    62      {
    63        "spdxElementId": "SPDXRef-9fb3aa2f8b",
    64        "relatedSpdxElement": "SPDXRef-ssl_client-1.30.1-r5",
    65        "relationshipType": "CONTAINS"
    66      }
    67    ],
    68    "hasExtractedLicensingInfos": [
    69      {
    70        "extractedText": "OpenSSL",
    71        "licenseId": "LicenseRef-de5acdd"
    72      },
    73      {
    74        "extractedText": "GPL-2.0",
    75        "licenseId": "LicenseRef-7d19a72"
    76      }
    77    ]
    78  }