diff --git a/software/example10/spdx3.0/hello-source.spdx.json b/software/example10/spdx3.0/hello-source.spdx.json new file mode 100644 index 0000000..4be9d3d --- /dev/null +++ b/software/example10/spdx3.0/hello-source.spdx.json @@ -0,0 +1,270 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd0" ], + "created" : "2022-10-28T17:24:21Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd28" ], + "created" : "2022-10-28T17:24:21Z" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd1", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd4" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd6" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd8" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd10" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd8", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd12" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd14" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd16" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd18" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd20" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd21", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd22" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd20", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd24" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd26", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd27" ], + "from" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd29", + "rootElement" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2" ], + "name" : "hello", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd6", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd10", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd14", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd18", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd22", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd24", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd27", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "MIT", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd29", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "name" : "Nisha Kumar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd25", + "type" : "Person", + "name" : "Nisha Kumar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd28", + "type" : "Person", + "name" : "Nisha Kumar", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd4", + "type" : "software_File", + "software_copyrightText" : "", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "da39a3ee5e6b4b0d3255bfef95601890afd80709" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + } ], + "name" : "__init__.py", + "software_primaryPurpose" : "source", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd8", + "type" : "software_File", + "software_copyrightText" : "", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "c2ddb1bc9641d602a4cec707f9d3ea3d6bfd2687ed0e90e523802beb7f02ab4c" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "810b63b67229d14e4687df80502d160a3545c852" + } ], + "name" : "hello.py", + "software_primaryPurpose" : "source", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd12", + "type" : "software_File", + "software_copyrightText" : "", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "4fd366f723928905612bb8dcfb04aa5c7ad389fa" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "4d442a156f678a19c6728a2d9fcaebeff521e2665e1f58202856c627158dd511" + } ], + "name" : "README.md", + "software_primaryPurpose" : "documentation", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd16", + "type" : "software_File", + "software_copyrightText" : "", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "8ec142b2c6bc7826d18075923b7d2c0cb4db0253" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "acb9c4a44e4e8cb9f332002d2a407932eea7d22496a74ac43f5eb53f9610f4b9" + } ], + "name" : "LICENSE", + "contentType" : "text/plain", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd20", + "type" : "software_File", + "software_copyrightText" : "", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "58f8786e67c5adbbdc2a7b70d0227785d295ae01e9d491e1bfda755043815fb0" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "9a1ca5d00712aa9029172d50ab2bcf62784560b9" + } ], + "name" : "pyproject.toml", + "software_primaryPurpose" : "source", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd2", + "type" : "software_Package", + "software_copyrightText" : "Copyright (c) 2022 Authors of Hello", + "software_downloadLocation" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "2dce8a5d1c734df7a46b88e62a751b4b30063d78" + } ], + "software_homePage" : "https://github.com/spdx/spdx-examples", + "name" : "hello", + "originatedBy" : [ "https://github.com/spdx/spdx-examples/example10/spdx-specv3/SPDXRef-gnrtd25" ], + "software_primaryPurpose" : "library", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example11/spdx3.0/sbom.spdx.json b/software/example11/spdx3.0/sbom.spdx.json new file mode 100644 index 0000000..004c95b --- /dev/null +++ b/software/example11/spdx3.0/sbom.spdx.json @@ -0,0 +1,229 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdUsing" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/additionalToolSPDXRef-gnrtd0" ], + "created" : "2022-11-03T07:10:10Z" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd1", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd2" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd2" ], + "completeness" : "noAssertion", + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd8" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd10" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd8" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd10" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd18" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd10" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd21" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd22", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd21" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd21" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd24", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd25" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd26", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd27", + "rootElement" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd2" ], + "name" : "SBOM-SPDX-2d85f548-12fa-46d5-87ce-5e78e5e111f4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/additionalToolSPDXRef-gnrtd0", + "type" : "Tool", + "name" : "sigs.k8s.io/bom/pkg/spdx", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd8", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "MIT", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd10", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd18", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(MIT OR Apache-2.0)", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd21", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd25", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NONE", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd27", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd5", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "build", + "completeness" : "noAssertion", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd6" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd11", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "build", + "completeness" : "noAssertion", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd12" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd15", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "build", + "completeness" : "noAssertion", + "to" : [ "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd16" ], + "from" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd2", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha512", + "hashValue" : "c61eeb0b489bb219b898c6d3044fc431dec58ad999dae2cf0a8067dd1b3e4eef2b186d0f8af63b4d80732aa5146f7b13b1feb7a454227cf26d4525874231a281" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "bd2195f2551328fa3ad870726f5591fd82fdc5dd33a359be79d356dbecd5868b" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "79b7bfed022c9c7c9957d8aec36cb6492a25b42a" + } ], + "name" : "hello-server", + "contentType" : "application/octet-stream", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NONE", + "software_packageVersion" : "0.1.0", + "name" : "hello-server-src", + "software_packageUrl" : "pkg:deb/debian/libselinux1-dev@3.1-3?arch=s390x", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd6", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "https://github.com/rust-lang/crates.io-index", + "software_packageVersion" : "0.14", + "name" : "hyper", + "software_packageUrl" : "pkg:cargo/hyper@0.14", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd12", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "https://github.com/rust-lang/crates.io-index", + "software_packageVersion" : "1.19.2", + "name" : "tokio", + "software_packageUrl" : "pkg:cargo/tokio@1.19.2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://spdx.org/spdxdocs/k8s-releng-bom-7c6a33ab-bd76-4b06-b291-a850e0815b07-specv3/SPDXRef-gnrtd16", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NONE", + "software_packageVersion" : "0.4.0", + "name" : "pretty_env_logger", + "software_packageUrl" : "pkg:cargo/pretty_env_logger@0.4.0", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example12/spdx3.0/hello-dist.spdx.json b/software/example12/spdx3.0/hello-dist.spdx.json new file mode 100644 index 0000000..6518c86 --- /dev/null +++ b/software/example12/spdx3.0/hello-dist.spdx.json @@ -0,0 +1,133 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/additionalToolSPDXRef-gnrtd1" ], + "created" : "2022-11-04T11:13:29Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd12" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/additionalToolSPDXRef-gnrtd13" ], + "created" : "2022-11-04T11:13:29Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd2", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd3" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd4", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd5" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd6", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd14", + "rootElement" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd3" ], + "name" : "hello 0.0.1", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "Microsoft.SBOMTool-0.2.7", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/additionalToolSPDXRef-gnrtd13", + "type" : "Tool", + "name" : "Microsoft.SBOMTool-0.2.7", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd7", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd14", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd0", + "type" : "Organization", + "name" : "DocFest", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd10", + "type" : "Organization", + "name" : "DocFest", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd12", + "type" : "Organization", + "name" : "DocFest", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd5", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "3e11868522b3c014cd7ef27b8472c19cf6911e6faa222b3aa7179b167d4c0b0b" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "0be4586c7dbcb2081ab136bdaff7362530e5d364" + } ], + "name" : "./hello-0.0.1.tar.gz", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd3", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "suppliedBy" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/q7S1LJe0Tke-HnphZSB1MQ-specv3/SPDXRef-gnrtd10", + "software_downloadLocation" : "NOASSERTION", + "software_packageVersion" : "0.0.1", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "b305e250fb019ba01deb27ccbd255fafe5a8d988" + } ], + "name" : "hello", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example12/spdx3.0/hello-src.spdx.json b/software/example12/spdx3.0/hello-src.spdx.json new file mode 100644 index 0000000..eed94db --- /dev/null +++ b/software/example12/spdx3.0/hello-src.spdx.json @@ -0,0 +1,548 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/additionalToolSPDXRef-gnrtd1" ], + "created" : "2022-11-04T11:11:52Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd57" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/additionalToolSPDXRef-gnrtd58" ], + "created" : "2022-11-04T11:11:52Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd2", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd4", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd5" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd6", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd10" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd10", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd12", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd10", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd14", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd16", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd14", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd18" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd18", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd18", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd21", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd22" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd22", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd24", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd22", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd25", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd26" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd27", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd26", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd28", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd26", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd29", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd30" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd31", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd30", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd32", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd30", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd33", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd34" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd35", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd34", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd36", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd34", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd37", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd38" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd39", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd38", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd40", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd38", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd41", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd42" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd43", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd42", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd44", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd42", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd45", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd46" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd47", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd46", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd48", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd46", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd49", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd50" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd51", + "type" : "Relationship", + "relationshipType" : "hasDocumentation", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd50" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd52", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd50", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd53", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd50", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd54", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd56", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7" ], + "from" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd59", + "rootElement" : [ "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3" ], + "name" : "hello 0.0.1", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "Microsoft.SBOMTool-0.2.7", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/additionalToolSPDXRef-gnrtd58", + "type" : "Tool", + "name" : "Microsoft.SBOMTool-0.2.7", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd7", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd59", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd0", + "type" : "Organization", + "name" : "DocFest", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd55", + "type" : "Organization", + "name" : "DocFest", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd57", + "type" : "Organization", + "name" : "DocFest", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd5", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "f84d3a18eaf5aa1d343be06a8c456b2e2a614d4c" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "87e1aa32dcc9b590ad37b0c51bbff0b90d992ac017b24190b1403479c73fe373" + } ], + "name" : "./lib/hello.rb", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd10", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "e55578b18df9ac77fab26e36ae165ff1e4b5d498e1005880f570739d206cbfef" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "7fd905d8ba81beb7e4194bdef067e68620c42a91" + } ], + "name" : "./hello.gemspec", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd14", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "5283a80567ec44c5cafc4434b8c15d59a261eb9faf14ec1d648f2f762840cfae" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "f5a5b10f3e0feeab03d48e9d377692dad9b7bd52" + } ], + "name" : "./README.md", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd18", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b5be44ef7a6f7f6ded5cc28ec27bd3cb9a67ccb2" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "19dfdedc02d042051495e22c522446664235ffcff56d9d9ecc30c31b22a6815c" + } ], + "name" : "./lib/hello/version.rb", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd22", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "e201190bc24e9f00849b3efa5fbaece2cbf069703232e50c7fa15d41c47f2ead" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "38ae71152a2d22a6b6418e0add993df2268cce81" + } ], + "name" : "./bin/setup", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd26", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "bced536adbe99bde1b1d0d0039f57ba83f10d727" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "1034271790dc61a4a4c444dfb05c77cb1f01a1f1622f9f6ada3d4034645947c9" + } ], + "name" : "./bin/console", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd30", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "7d82872a906a22904a3419329427b957edf26e7f" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "37745cce994a91bda95e5ddabad0e2c4df489361c619826240d49f52d752c392" + } ], + "name" : "./Rakefile", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd34", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "f11ed3c48976fa5eff33cea9eef89dc36db3d68c" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "43be4a455dc8d2ae2844e1fd3ea7353d33c2411997dff8d3d4e8cc9377c6f5df" + } ], + "name" : "./sig/hello.rbs", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd38", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "d95216a381538de969c759a32a427d8eb437e532" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "bb1f875a243678ad0267c354424efaedab526a159576b2c2f20fb12527b39ba4" + } ], + "name" : "./Gemfile", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd42", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "dd14ebd399202141553c772590fe3977ce39f36c" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "dca446f7e4e73589403ecfc03515c75dd3853711dbfb809f6d53f99ba3d13be1" + } ], + "name" : "./Gemfile.lock", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd46", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "b6dc3c62c55aa27af79a6e9d0d33a033e8ac4a50c8574aa18dbbfb75de2322ae" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "42d586fd523fe822c198e99af5866bc26bba4eb5" + } ], + "name" : "./LICENSE.txt", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd50", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "60d67ed18c1946a93a47b7d30ff010024c843a16" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "46e3278d9ad88f04bee1e3e8797f77e11833674d744647ac7d43954f7b2b199a" + } ], + "name" : "./CHANGELOG.md", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd3", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "suppliedBy" : "https://swinslow.net/spdx-examples/example11/hello/hello/0.0.1/csf4PsHt3k6fM6HJmv4tGQ-specv3/SPDXRef-gnrtd55", + "software_downloadLocation" : "NOASSERTION", + "software_packageVersion" : "0.0.1", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "87568b828a4fd64624024c6ab26009fe9ece46e2" + } ], + "name" : "hello", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example14/content/examplemaven-0.0.1.spdx3.json b/software/example14/content/examplemaven-0.0.1.spdx3.json new file mode 100644 index 0000000..8b016d9 --- /dev/null +++ b/software/example14/content/examplemaven-0.0.1.spdx3.json @@ -0,0 +1,394 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd1" ], + "created" : "2022-10-23T15:44:16Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd38" ], + "createdUsing" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd39" ], + "created" : "2022-10-23T15:44:16Z" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd2", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd4", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd6", + "type" : "Relationship", + "relationshipType" : "generates", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "comment" : "", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd12", + "type" : "Relationship", + "relationshipType" : "hasTestCase", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "comment" : "", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd22", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd24", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd26", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd27", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd28", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd30", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd31", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd32", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd35", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd34" ], + "completeness" : "complete", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd37", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd43", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd45", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd46" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd40", + "rootElement" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "name" : "examplemaven", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "spdx-maven-plugin", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd39", + "type" : "Tool", + "name" : "spdx-maven-plugin", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd40", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd46", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CPL-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd42", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "test", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "comment" : "Relationship created based on Maven POM information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd33", + "type" : "Organization", + "name" : "Linux Foundation", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd36", + "type" : "Organization", + "name" : "SPDX", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd44", + "type" : "Organization", + "name" : "JUnit", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd38", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "type" : "software_File", + "software_copyrightText" : "Copyright (c) 2020 Source Auditor Inc.", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "a6f47dbc7e4615058490055172fe0065c55f8fc5" + } ], + "software_attributionText" : [ "SPDX-License-Identifier: Apache-2.0\nCopyright (c) 2022 Source Auditor Inc." ], + "name" : "./src/main/java/org/spdx/examplemaven/App.java", + "software_primaryPurpose" : "source", + "comment" : "This file contains SPDX-License-Identifiers for Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11", + "type" : "software_File", + "software_copyrightText" : "Copyright (c) 2020 Source Auditor Inc.", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "4b4df52d36588c8e9482d56eebc42336447f3dad" + } ], + "software_attributionText" : [ "SPDX-License-Identifier: Apache-2.0\nCopyright (c) 2022 Source Auditor Inc." ], + "name" : "./src/test/java/org/spdx/examplemaven/AppTest.java", + "software_primaryPurpose" : "source", + "comment" : "This file contains SPDX-License-Identifiers for Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd34", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b8a7e6c75001e6d78625cfc9a3103bf121abf8b4" + } ], + "name" : "examplemaven-0.0.1.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "type" : "software_Package", + "software_copyrightText" : "Copyright (c) 2022 Source Auditor Inc.", + "suppliedBy" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd36", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "c12417def36d7804096521de4280721e5863e68b" + } ], + "name" : "examplemaven", + "software_primaryPurpose" : "library", + "software_downloadLocation" : "NOASSERTION", + "summary" : "This is a simple example Maven project created using the Maven quickstart archetype with one dependency added.", + "software_packageVersion" : "0.0.1", + "software_homePage" : "https://github.com/spdx/spdx-examples", + "description" : "This is a simple example Maven project created using the Maven quickstart archetype with one dependency added.", + "originatedBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd33" ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j API", + "description" : "The Apache Log4j API", + "name" : "Apache Log4j API", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The slf4j API", + "software_homePage" : "http://www.slf4j.org", + "description" : "The slf4j API", + "name" : "SLF4J API Module", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j Implementation", + "description" : "The Apache Log4j Implementation", + "name" : "Apache Log4j Core", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j SLF4J API binding to Log4j 2 Core", + "description" : "The Apache Log4j SLF4J API binding to Log4j 2 Core", + "name" : "Apache Log4j SLF4J Binding", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.", + "software_packageVersion" : "3.8.1", + "software_homePage" : "http://junit.org", + "description" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.", + "name" : "JUnit", + "originatedBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd44" ], + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example14/spdx3.0/examplemaven-0.0.1-enriched.spdx.json b/software/example14/spdx3.0/examplemaven-0.0.1-enriched.spdx.json new file mode 100644 index 0000000..a7b566c --- /dev/null +++ b/software/example14/spdx3.0/examplemaven-0.0.1-enriched.spdx.json @@ -0,0 +1,426 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd2", "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd1" ], + "created" : "2024-11-18T10:22:12Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd40" ], + "createdUsing" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd41", "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd42" ], + "created" : "2024-11-18T10:22:12Z" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd6" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "generates", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd12" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasTestCase", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd12" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd16", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd17", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd18", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd21", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd22", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd22", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd24", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd22", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd25", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd26", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd27", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd26", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd28", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd26", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd29", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd30", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd31", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd30", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd32", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd30", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd33", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd36", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd35" ], + "completeness" : "complete", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd38", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd39", + "type" : "Relationship", + "relationshipType" : "amendedBy", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/document0" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1#SPDXRef-DOCUMENT", + "comment" : "The original document and been enriched by the Parlay application", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd46", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd44", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd48", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd49" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd44", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd43", + "rootElement" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4" ], + "import" : [ { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "3f9deeef2efdbb0eb4b15ec216f5c4e3af2d13e2" + } ], + "externalSpdxId" : "http://spdx.org/documents/examplemaven-0.0.1#SPDXRef-DOCUMENT", + "locationHint" : "http://spdx.org/documents/examplemaven-0.0.1" + } ], + "name" : "examplemaven", + "namespaceMap" : [ { + "type" : "NamespaceMap", + "prefix" : "DocumentRef-original", + "namespace" : "http://spdx.org/documents/examplemaven-0.0.1#" + } ], + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "spdx-maven-plugin", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "Parlay", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd41", + "type" : "Tool", + "name" : "spdx-maven-plugin", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/additionalToolSPDXRef-gnrtd42", + "type" : "Tool", + "name" : "Parlay", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd9", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd19", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd43", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd49", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CPL-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd45", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "test", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd44" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "comment" : "Relationship created based on Maven POM information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd34", + "type" : "Organization", + "name" : "Linux Foundation", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd37", + "type" : "Organization", + "name" : "SPDX", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd47", + "type" : "Organization", + "name" : "JUnit", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd40", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "Copyright (c) 2020 Source Auditor Inc.", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "a6f47dbc7e4615058490055172fe0065c55f8fc5" + } ], + "software_attributionText" : [ "SPDX-License-Identifier: Apache-2.0\nCopyright (c) 2022 Source Auditor Inc." ], + "name" : "./src/main/java/org/spdx/examplemaven/App.java", + "software_primaryPurpose" : "source", + "comment" : "This file contains SPDX-License-Identifiers for Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd12", + "type" : "software_File", + "software_copyrightText" : "Copyright (c) 2020 Source Auditor Inc.", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "4b4df52d36588c8e9482d56eebc42336447f3dad" + } ], + "software_attributionText" : [ "SPDX-License-Identifier: Apache-2.0\nCopyright (c) 2022 Source Auditor Inc." ], + "name" : "./src/test/java/org/spdx/examplemaven/AppTest.java", + "software_primaryPurpose" : "source", + "comment" : "This file contains SPDX-License-Identifiers for Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd35", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b8a7e6c75001e6d78625cfc9a3103bf121abf8b4" + } ], + "name" : "examplemaven-0.0.1.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "Copyright (c) 2022 Source Auditor Inc.", + "suppliedBy" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd37", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "c12417def36d7804096521de4280721e5863e68b" + } ], + "name" : "examplemaven", + "software_primaryPurpose" : "library", + "software_downloadLocation" : "NOASSERTION", + "summary" : "This is a simple example Maven project created using the Maven quickstart archetype with one dependency added.", + "software_packageVersion" : "0.0.1", + "software_homePage" : "https://github.com/spdx/spdx-examples", + "description" : "This is a simple example Maven project created using the Maven quickstart archetype with one dependency added.", + "originatedBy" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd34" ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd17", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j Implementation", + "description" : "The Apache Log4j Implementation", + "name" : "Apache Log4j Core", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd22", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j API", + "description" : "The Apache Log4j API", + "name" : "Apache Log4j API", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd26", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The slf4j API", + "software_homePage" : "http://www.slf4j.org", + "description" : "The slf4j API", + "name" : "SLF4J API Module", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd30", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j SLF4J API binding to Log4j 2 Core", + "description" : "The Apache Log4j SLF4J API binding to Log4j 2 Core", + "name" : "Apache Log4j SLF4J Binding", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd44", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.", + "software_packageVersion" : "3.8.1", + "software_homePage" : "http://junit.org", + "description" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.", + "name" : "JUnit", + "originatedBy" : [ "http://spdx.org/documents/examplemaven-0.0.1/enriched-specv3/SPDXRef-gnrtd47" ], + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example4/spdx3.0/example4-bin.json b/software/example4/spdx3.0/example4-bin.json new file mode 100644 index 0000000..4f06eb8 --- /dev/null +++ b/software/example4/spdx3.0/example4-bin.json @@ -0,0 +1,340 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/additionalToolSPDXRef-gnrtd1", "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/additionalToolSPDXRef-gnrtd2" ], + "created" : "2021-08-26T01:51:30Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd8", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd8", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd12" ], + "completeness" : "complete", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd8", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd8", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd18", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd19" ], + "completeness" : "complete", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd21", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd22", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2#SPDXRef-main-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd25", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2#SPDXRef-lib-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd27", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd28" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd29", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd30", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd31" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd32", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd33", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd34", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd35" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd36", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd37", + "rootElement" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4" ], + "import" : [ { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "3a365c2d58103971a721c9ee18731d3e942e002f" + } ], + "externalSpdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2#SPDXRef-lib-src", + "locationHint" : "https://swinslow.net/spdx-examples/example4/main-src-v2" + }, { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "3a365c2d58103971a721c9ee18731d3e942e002f" + } ], + "externalSpdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2#SPDXRef-main-src", + "locationHint" : "https://swinslow.net/spdx-examples/example4/main-src-v2" + } ], + "name" : "main-bin", + "namespaceMap" : [ { + "type" : "NamespaceMap", + "prefix" : "DocumentRef-main-src", + "namespace" : "https://swinslow.net/spdx-examples/example4/main-src-v2#" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/builder", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/idsearcher", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd11", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd28", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "BSD-3-Clause", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd31", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "GPL-3.0-or-later", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd35", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(BSD-3-Clause AND GPL-3.0-or-later)", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd37", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd9", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "runtime", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd8" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd17", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "runtime", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd16" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd26", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "runtime", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "95b1b3cbfa03562f623213fe509f2285" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "a9fc794448dfb3c968f2aac0cd40727b4c1fae3f" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "046057f8b5b87014900f74dc1605583b2f5cc0e4c4730a397e63f2f50006e2a8" + } ], + "name" : "./main", + "contentType" : "application/octet-stream", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd12", + "type" : "software_File", + "name" : "libdl.so.2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd19", + "type" : "software_File", + "name" : "libc.so.6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd24", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "33a9d92b21d093a781025514179659173dd34ab0" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "e00847f0d4d8c682caf802cd7ab9be64d023a7042ef6fa55b4e8242c55096c80" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "347a72d986d3799ef73bc6eb8d8e96f8" + } ], + "name" : "./lib.so", + "contentType" : "application/octet-stream", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example4/content/build", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "edbf31eb11b6b1698b7eec29bde0ea7040e0a9a4" + } ], + "name" : "main-bin", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd8", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "name" : "libdl", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-bin-v2-specv3/SPDXRef-gnrtd16", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "name" : "libc", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example4/spdx3.0/example4-src.json b/software/example4/spdx3.0/example4-src.json new file mode 100644 index 0000000..318073c --- /dev/null +++ b/software/example4/spdx3.0/example4-src.json @@ -0,0 +1,227 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/additionalToolSPDXRef-gnrtd1", "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/additionalToolSPDXRef-gnrtd2" ], + "created" : "2021-08-26T01:51:00Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd8" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd8" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd11" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd11", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd11", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd16", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd17" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd18", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd21" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd22", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd23", + "rootElement" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4" ], + "name" : "main-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/builder", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/idsearcher", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd8", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "BSD-3-Clause", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd14", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "GPL-3.0-or-later", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd21", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(BSD-3-Clause AND GPL-3.0-or-later)", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd23", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd12", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "usesTool", + "scope" : "build", + "to" : [ "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd11" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "f66be0b05dc754a545be49f599a7ce2c41db2b1e" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "c1d6c93251d8af86c9d354510c7c7735cfb012c1a96b8b90e22d3ec1d5a5fdb2" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "fbda409f6aec0504e600c57a392660c2" + } ], + "name" : "./lib.c", + "software_primaryPurpose" : "source", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd11", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "4031bd733239f0fe89a5c3a4d1a62301b0ce4e654207afff8564a3d45e41f85e" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "ef4cccbe2ad9bbedc870848c5b711e4d" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "a496da160a7d2dec3fef13d4cb1397d15269e367" + } ], + "name" : "./Makefile", + "software_primaryPurpose" : "source", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd17", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "74c1464f8122373151a4e032494045fe" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "9dfa5009f890dbd4bab5624a7fbf110de5b95a40" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "dd089736525455d65c283d3698bc403d12acc04736c0bcbad5fc65c80a0e46d5" + } ], + "name" : "./main.c", + "software_primaryPurpose" : "source", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example4/main-src-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example4/content/src", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "7f560718ca985c9334efbb56291e494df22ed97c" + } ], + "name" : "main-src", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example5/spdx3.0/example5-bin.json b/software/example5/spdx3.0/example5-bin.json new file mode 100644 index 0000000..045a49d --- /dev/null +++ b/software/example5/spdx3.0/example5-bin.json @@ -0,0 +1,168 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd1", "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd2" ], + "created" : "2021-08-26T01:54:00Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2#SPDXRef-Makefile", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2#SPDXRef-hello-go-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd10" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd12" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd10" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd12" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd15", + "rootElement" : [ "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "import" : [ { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "c7ecde060983373ace6ff9cfd1ddc7ccd5ce5e29" + } ], + "externalSpdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2#SPDXRef-hello-go-src", + "locationHint" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2" + }, { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "c7ecde060983373ace6ff9cfd1ddc7ccd5ce5e29" + } ], + "externalSpdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2#SPDXRef-Makefile", + "locationHint" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2" + } ], + "name" : "hello-go-bin", + "namespaceMap" : [ { + "type" : "NamespaceMap", + "prefix" : "DocumentRef-hello-go-src", + "namespace" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2#" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/builder", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/idsearcher", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd10", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "GPL-3.0-or-later", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd12", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd15", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "9ec63d68bdceb2922548e3faa377e7d0" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "78ed46e8e6f86f19d3a6782979029be5f918235f" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "3d51cb6c9a38d437e8ee20a1902a15875ea1d3771a215622e14739532be14949" + } ], + "name" : "./hello", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example5/content/build", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "41acac4b846ee388cb6c1234f04489ccd5daa5a5" + } ], + "name" : "hello-go-bin", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example5/spdx3.0/example5-src.json b/software/example5/spdx3.0/example5-src.json new file mode 100644 index 0000000..b3c21a1 --- /dev/null +++ b/software/example5/spdx3.0/example5-src.json @@ -0,0 +1,178 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd1", "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd2" ], + "created" : "2021-08-26T01:53:00Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd12" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd16" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd18", + "rootElement" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4" ], + "name" : "hello-go-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/builder", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/idsearcher", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd9", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "GPL-3.0-or-later", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd16", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd18", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd7", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "usesTool", + "scope" : "build", + "to" : [ "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "5cb1c1c76bd0694fe5be2774c7df8166f52498a0" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "23ffc10f988297282e29b32e9c520fd33b4122a487ccaa74c979d225181aa8bf" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "7c1236d86a868a5762ba16274339c0f8" + } ], + "name" : "./Makefile", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd12", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "bb5ae27c76cd4332edd0da834eb4bd8a7c31ca93" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "1ce078bb915470348fcf481198b8ab1cdb7d36481564959387153e8d4cd1bbf2" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "7f4170f33ec5c81492785e1147dfd3af" + } ], + "name" : "./hello.go", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example5/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example5/content/src", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "6486e016b01e9ec8a76998cefd0705144d869234" + } ], + "name" : "hello-go-src", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example6/spdx3.0/example6-bin.json b/software/example6/spdx3.0/example6-bin.json new file mode 100644 index 0000000..9d20528 --- /dev/null +++ b/software/example6/spdx3.0/example6-bin.json @@ -0,0 +1,232 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd1", "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd2" ], + "created" : "2021-08-26T01:56:00Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2#SPDXRef-hello-go-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "generates", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2#SPDXRef-Makefile", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd10" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd12" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd14" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd12" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd151", + "type" : "LifecycleScopedRelationship", + "scope" : "build", + "relationshipType" : "usesTool", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2#SPDXRef-Package-go-compiler" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd152", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "runtime", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2#SPDXRef-Package-go.fmt" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd153", + "type" : "Relationship", + "relationshipType" : "hasStaticLink", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2#SPDXRef-Package-go.fmt", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd154", + "type" : "Relationship", + "relationshipType" : "hasStaticLink", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2#SPDXRef-Package-go.reflect", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd155", + "type" : "Relationship", + "relationshipType" : "hasStaticLink", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2#SPDXRef-Package-go.strconv", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd16", + "rootElement" : [ "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4" ], + "import" : [ { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b3018ddb18802a56b60ad839c98d279687b60bd6" + } ], + "externalSpdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2#SPDXRef-hello-go-src", + "locationHint" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2" + }, { + "type" : "ExternalMap", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b3018ddb18802a56b60ad839c98d279687b60bd6" + } ], + "externalSpdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2#SPDXRef-Makefile", + "locationHint" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2" + } ], + "name" : "hello-go-bin", + "namespaceMap" : [ { + "type" : "NamespaceMap", + "prefix" : "DocumentRef-go-lib", + "namespace" : "https://swinslow.net/spdx-examples/example6/go-lib-v2#" + }, { + "type" : "NamespaceMap", + "prefix" : "DocumentRef-hello-go-src", + "namespace" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2#" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/builder", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/idsearcher", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd10", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(GPL-3.0-or-later AND LicenseRef-Golang-BSD-plus-Patents)", + "simplelicensing_customIdToUri" : [ { + "type" : "DictionaryEntry", + "value" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/LicenseRef-Golang-BSD-plus-Patents", + "key" : "LicenseRef-Golang-BSD-plus-Patents" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd12", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd14", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(GPL-3.0-or-later AND LicenseRef-Golang-BSD-plus-Patents)", + "simplelicensing_customIdToUri" : [ { + "type" : "DictionaryEntry", + "value" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/LicenseRef-Golang-BSD-plus-Patents", + "key" : "LicenseRef-Golang-BSD-plus-Patents" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd16", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd17", + "type" : "expandedlicensing_CustomLicense", + "expandedlicensing_seeAlso" : [ "https://github.com/golang/go/blob/master/LICENSE", "https://github.com/golang/go/blob/master/PATENTS" ], + "simplelicensing_licenseText" : "Copyright (c) 2009 The Go Authors. All rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google Inc. nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\nAdditional IP Rights Grant (Patents)\n\n\"This implementation\" means the copyrightable works distributed by\nGoogle as part of the Go project.\n\nGoogle hereby grants to You a perpetual, worldwide, non-exclusive,\nno-charge, royalty-free, irrevocable (except as stated in this section)\npatent license to make, have made, use, offer to sell, sell, import,\ntransfer and otherwise run, modify and propagate the contents of this\nimplementation of Go, where such license applies only to those patent\nclaims, both currently owned or controlled by Google and acquired in\nthe future, licensable by Google that are necessarily infringed by this\nimplementation of Go. This grant does not include claims that would be\ninfringed only as a consequence of further modification of this\nimplementation. If you or your agent or exclusive licensee institute or\norder or agree to the institution of patent litigation against any\nentity (including a cross-claim or counterclaim in a lawsuit) alleging\nthat this implementation of Go or any code incorporated within this\nimplementation of Go constitutes direct or contributory patent\ninfringement, or inducement of patent infringement, then any patent\nrights granted to you under this License for this implementation of Go\nshall terminate as of the date such litigation is filed.", + "name" : "Golang BSD-plus-PATENTS", + "comment" : "The Golang license text is split across two files, with the BSD-3-Clause content in LICENSE and the Additional IP Rights Grant in PATENTS.", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "9ec63d68bdceb2922548e3faa377e7d0" + }, { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "78ed46e8e6f86f19d3a6782979029be5f918235f" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "3d51cb6c9a38d437e8ee20a1902a15875ea1d3771a215622e14739532be14949" + } ], + "name" : "./hello", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-bin-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example6/content/build", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "41acac4b846ee388cb6c1234f04489ccd5daa5a5" + } ], + "name" : "hello-go-bin", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example6/spdx3.0/example6-lib.json b/software/example6/spdx3.0/example6-lib.json new file mode 100644 index 0000000..a04b0c4 --- /dev/null +++ b/software/example6/spdx3.0/example6-lib.json @@ -0,0 +1,249 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd0" ], + "created" : "2021-08-26T01:55:00Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd1", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd9", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd9", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd12", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd13" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd13", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd13", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd16", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd17" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd18", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd19" ], + "completeness" : "complete", + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd21", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd22", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd25", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd24" ], + "completeness" : "complete", + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd27", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd28" ], + "from" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd29", + "rootElement" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2" ], + "name" : "go-lib", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd6", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd28", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "LicenseRef-Golang-BSD-plus-Patents", + "simplelicensing_customIdToUri" : [ { + "type" : "DictionaryEntry", + "value" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/LicenseRef-Golang-BSD-plus-Patents", + "key" : "LicenseRef-Golang-BSD-plus-Patents" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd29", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd23", + "type" : "Organization", + "name" : "Google LLC", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd26", + "type" : "Organization", + "name" : "Canonical Ltd.", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd19", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "4448b9e62b3c364a073808e22643985d9f49c4ad44aa11d8e4a17c49600a7c3a" + } ], + "name" : "go", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd24", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "0d6e1420facd978e532eae7bd5cb6378b65522c12fa9dcf682129e698c34d1b2" + } ], + "name" : "go_6715.snap", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd2", + "type" : "software_Package", + "software_copyrightText" : "Copyright (c) 2009 The Go Authors. All rights reserved.", + "suppliedBy" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd26", + "software_downloadLocation" : "NOASSERTION", + "summary" : "Ubuntu snap distribution of Golang v1.15.4 linux/amd64", + "software_packageVersion" : "1.15.4", + "software_homePage" : "https://golang.org/", + "name" : "go-1.15", + "originatedBy" : [ "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd23" ], + "software_sourceInfo" : "installed using Ubuntu snap file, see https://snapcraft.io/go", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "software_packageVersion" : "1.15.4", + "name" : "go.strconv", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd9", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "software_packageVersion" : "1.15.4", + "name" : "go.reflect", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd13", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "software_packageVersion" : "1.15.4", + "name" : "go.fmt", + "comment" : "This represents the fmt standard library, not the gofmt command.", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/go-lib-v2-specv3/SPDXRef-gnrtd17", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "software_packageVersion" : "1.15.4", + "name" : "go", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example6/spdx3.0/example6-src.json b/software/example6/spdx3.0/example6-src.json new file mode 100644 index 0000000..185afde --- /dev/null +++ b/software/example6/spdx3.0/example6-src.json @@ -0,0 +1,178 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd1", "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd2" ], + "created" : "2021-08-26T01:55:30Z" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd3", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd5", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd6" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd8", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd6", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd12" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd16" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd9" ], + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd18", + "rootElement" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4" ], + "name" : "hello-go-src", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/builder", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/additionalToolSPDXRef-gnrtd2", + "type" : "Tool", + "name" : "github.com/spdx/tools-golang/idsearcher", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd9", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "GPL-3.0-or-later", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd16", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd18", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd7", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "usesTool", + "scope" : "build", + "to" : [ "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd6" ], + "completeness" : "noAssertion", + "from" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "externalIdentifier" : [ { + "type" : "ExternalIdentifier", + "identifier" : "steve@swinslow.net", + "externalIdentifierType" : "email" + } ], + "name" : "Steve Winslow", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd6", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "5cb1c1c76bd0694fe5be2774c7df8166f52498a0" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "23ffc10f988297282e29b32e9c520fd33b4122a487ccaa74c979d225181aa8bf" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "7c1236d86a868a5762ba16274339c0f8" + } ], + "name" : "./Makefile", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd12", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "bb5ae27c76cd4332edd0da834eb4bd8a7c31ca93" + }, { + "type" : "Hash", + "algorithm" : "sha256", + "hashValue" : "1ce078bb915470348fcf481198b8ab1cdb7d36481564959387153e8d4cd1bbf2" + }, { + "type" : "Hash", + "algorithm" : "md5", + "hashValue" : "7f4170f33ec5c81492785e1147dfd3af" + } ], + "name" : "./hello.go", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "https://swinslow.net/spdx-examples/example6/hello-go-src-v2-specv3/SPDXRef-gnrtd4", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "git+https://github.com/swinslow/spdx-examples.git#example6/content/src", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "6486e016b01e9ec8a76998cefd0705144d869234" + } ], + "name" : "hello-go-src", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example8/spdx3.0/examplemaven-0.0.1.spdx.json b/software/example8/spdx3.0/examplemaven-0.0.1.spdx.json new file mode 100644 index 0000000..8b016d9 --- /dev/null +++ b/software/example8/spdx3.0/examplemaven-0.0.1.spdx.json @@ -0,0 +1,394 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd1" ], + "created" : "2022-10-23T15:44:16Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd38" ], + "createdUsing" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd39" ], + "created" : "2022-10-23T15:44:16Z" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd2", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd4", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd6", + "type" : "Relationship", + "relationshipType" : "generates", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "comment" : "", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd10", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd12", + "type" : "Relationship", + "relationshipType" : "hasTestCase", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "comment" : "", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd17", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd22", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd24", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd26", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd27", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd28", + "type" : "Relationship", + "relationshipType" : "hasDynamicLink", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "comment" : "Relationship based on Maven POM file dependency information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd30", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd31", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd32", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd35", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd34" ], + "completeness" : "complete", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd37", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd43", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd45", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd46" ], + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd40", + "rootElement" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3" ], + "name" : "examplemaven", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "spdx-maven-plugin", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/additionalToolSPDXRef-gnrtd39", + "type" : "Tool", + "name" : "spdx-maven-plugin", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd8", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd18", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd40", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd46", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CPL-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd42", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "test", + "to" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41" ], + "completeness" : "noAssertion", + "from" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "comment" : "Relationship created based on Maven POM information", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd33", + "type" : "Organization", + "name" : "Linux Foundation", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd36", + "type" : "Organization", + "name" : "SPDX", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd44", + "type" : "Organization", + "name" : "JUnit", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd38", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd5", + "type" : "software_File", + "software_copyrightText" : "Copyright (c) 2020 Source Auditor Inc.", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "a6f47dbc7e4615058490055172fe0065c55f8fc5" + } ], + "software_attributionText" : [ "SPDX-License-Identifier: Apache-2.0\nCopyright (c) 2022 Source Auditor Inc." ], + "name" : "./src/main/java/org/spdx/examplemaven/App.java", + "software_primaryPurpose" : "source", + "comment" : "This file contains SPDX-License-Identifiers for Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd11", + "type" : "software_File", + "software_copyrightText" : "Copyright (c) 2020 Source Auditor Inc.", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "4b4df52d36588c8e9482d56eebc42336447f3dad" + } ], + "software_attributionText" : [ "SPDX-License-Identifier: Apache-2.0\nCopyright (c) 2022 Source Auditor Inc." ], + "name" : "./src/test/java/org/spdx/examplemaven/AppTest.java", + "software_primaryPurpose" : "source", + "comment" : "This file contains SPDX-License-Identifiers for Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd34", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b8a7e6c75001e6d78625cfc9a3103bf121abf8b4" + } ], + "name" : "examplemaven-0.0.1.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd3", + "type" : "software_Package", + "software_copyrightText" : "Copyright (c) 2022 Source Auditor Inc.", + "suppliedBy" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd36", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "c12417def36d7804096521de4280721e5863e68b" + } ], + "name" : "examplemaven", + "software_primaryPurpose" : "library", + "software_downloadLocation" : "NOASSERTION", + "summary" : "This is a simple example Maven project created using the Maven quickstart archetype with one dependency added.", + "software_packageVersion" : "0.0.1", + "software_homePage" : "https://github.com/spdx/spdx-examples", + "description" : "This is a simple example Maven project created using the Maven quickstart archetype with one dependency added.", + "originatedBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd33" ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd16", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j API", + "description" : "The Apache Log4j API", + "name" : "Apache Log4j API", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd21", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The slf4j API", + "software_homePage" : "http://www.slf4j.org", + "description" : "The slf4j API", + "name" : "SLF4J API Module", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd25", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j Implementation", + "description" : "The Apache Log4j Implementation", + "name" : "Apache Log4j Core", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd29", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "The Apache Log4j SLF4J API binding to Log4j 2 Core", + "description" : "The Apache Log4j SLF4J API binding to Log4j 2 Core", + "name" : "Apache Log4j SLF4J Binding", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd41", + "type" : "software_Package", + "software_copyrightText" : "UNSPECIFIED", + "software_downloadLocation" : "NOASSERTION", + "summary" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.", + "software_packageVersion" : "3.8.1", + "software_homePage" : "http://junit.org", + "description" : "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.", + "name" : "JUnit", + "originatedBy" : [ "http://spdx.org/documents/examplemaven-0.0.1-specv3/SPDXRef-gnrtd44" ], + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file diff --git a/software/example9/spdx3.0/appbomination.spdx.json b/software/example9/spdx3.0/appbomination.spdx.json new file mode 100644 index 0000000..8994365 --- /dev/null +++ b/software/example9/spdx3.0/appbomination.spdx.json @@ -0,0 +1,852 @@ +{ + "@context" : "https://spdx.org/rdf/3.0.1/spdx-context.jsonld", + "@graph" : [ { + "@id" : "_:creationInfo_0", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd0" ], + "createdUsing" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/additionalToolSPDXRef-gnrtd1" ], + "created" : "2021-09-02T13:46:32Z" + }, { + "@id" : "_:creationInfo_1", + "type" : "CreationInfo", + "specVersion" : "3.0.1", + "createdBy" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd71" ], + "createdUsing" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/additionalToolSPDXRef-gnrtd72" ], + "created" : "2021-09-02T13:46:32Z" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd2", + "type" : "Relationship", + "relationshipType" : "describes", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/document0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd4", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd5" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd6", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd5" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd7", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd9", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd5", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd11", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd12" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd13", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd12" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd14", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd15", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd16", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd17" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd18", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd17" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd19", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd20", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd17", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd21", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd22" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd23", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd22" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd24", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd22", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd25", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd22", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd26", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd27" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd28", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd27" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd30", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd31" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd32", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd31" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd29", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd33", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd31" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd27", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd34", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd27", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd35", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd36" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd37", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd36" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd38", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd39", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd38", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd40", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd38", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd41", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd36", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd42", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd36", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd43", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd44" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd45", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd44" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd38", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd46", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd44", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd47", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd44", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd48", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd49" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd50", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd51" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd49", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd52", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd49", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd53", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd54" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd55", + "type" : "Relationship", + "relationshipType" : "hasMetadata", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd54" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd56", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd57" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd54", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd58", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd54", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd59", + "type" : "Relationship", + "relationshipType" : "contains", + "completeness" : "noAssertion", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd60" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd61", + "type" : "Relationship", + "relationshipType" : "contains", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd60" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd62", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd60", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd63", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd60", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd64", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd65" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd68", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd67" ], + "completeness" : "complete", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd70", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd75", + "type" : "Relationship", + "relationshipType" : "dependsOn", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd74" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd76", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd78", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd79" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd76", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd81", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd80" ], + "completeness" : "complete", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd76", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd82", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd79" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd76", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd83", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd84" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd74", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd86", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd85" ], + "completeness" : "complete", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd74", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd87", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd74", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd89", + "type" : "Relationship", + "relationshipType" : "dependsOn", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd88" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd90", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd88", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd92", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd91" ], + "completeness" : "complete", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd88", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd93", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd88", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd95", + "type" : "Relationship", + "relationshipType" : "dependsOn", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd94" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd96", + "type" : "Relationship", + "relationshipType" : "hasConcludedLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd94", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd98", + "type" : "Relationship", + "relationshipType" : "hasDistributionArtifact", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd97" ], + "completeness" : "complete", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd94", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd99", + "type" : "Relationship", + "relationshipType" : "hasDeclaredLicense", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10" ], + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd94", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/document0", + "type" : "SpdxDocument", + "dataLicense" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd73", + "rootElement" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3" ], + "name" : "SpdxDoc for App-BOM-ination", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/additionalToolSPDXRef-gnrtd1", + "type" : "Tool", + "name" : "Source Auditor Open Source Console", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/additionalToolSPDXRef-gnrtd72", + "type" : "Tool", + "name" : "Source Auditor Open Source Console", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd8", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "Apache-2.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd10", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "NOASSERTION", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd31", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "LicenseRef-1", + "simplelicensing_customIdToUri" : [ { + "type" : "DictionaryEntry", + "value" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/LicenseRef-1", + "key" : "LicenseRef-1" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd51", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(Apache-2.0 AND LicenseRef-1)", + "simplelicensing_customIdToUri" : [ { + "type" : "DictionaryEntry", + "value" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/LicenseRef-1", + "key" : "LicenseRef-1" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd57", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(LGPL-2.0-or-later OR WTFPL)", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd65", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "(Apache-2.0 AND LicenseRef-1)", + "simplelicensing_customIdToUri" : [ { + "type" : "DictionaryEntry", + "value" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/LicenseRef-1", + "key" : "LicenseRef-1" + } ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd73", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "CC0-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd79", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "EPL-1.0", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd84", + "type" : "simplelicensing_LicenseExpression", + "simplelicensing_licenseExpression" : "BSD-3-Clause", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd77", + "type" : "LifecycleScopedRelationship", + "relationshipType" : "dependsOn", + "scope" : "test", + "to" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd76" ], + "completeness" : "noAssertion", + "from" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd69", + "type" : "Organization", + "name" : "ACT Project", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd0", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd66", + "type" : "Person", + "name" : "Yevester", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd71", + "type" : "Person", + "name" : "Gary O'Neall", + "creationInfo" : "_:creationInfo_1" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd5", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "92170cdc034b2ff819323ff670d3b7266c8bffcd" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/LICENSE", + "software_primaryPurpose" : "other", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd12", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "1458a5c5fb1189d2cc8212052975f39ae710d622" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/settings.gradle", + "software_primaryPurpose" : "other", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd17", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "340e8b696bc50d76cf50df943dbaf46591da9ef4" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/logo.png", + "contentType" : "application/octet-stream", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd22", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "2b7b936a3f185a53528724e4f4141030906963c2" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/src/main/java/com/github/appbomination/Main.java", + "software_primaryPurpose" : "source", + "comment" : "Seen licenses generated by Source Auditor Scanner. Results should be manually verified.", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd27", + "type" : "software_File", + "software_copyrightText" : "Copyright Faust Inc. All, and I mean ALL, rights are reserved", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "fd668bc0096794e4d8125a29f9a746c0ab1edc57" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/src/main/java/com/github/appbomination/InsufficientKarmaException.java", + "software_primaryPurpose" : "source", + "comment" : "BOMNOTE:File|Matched Notice='Faust Proprietary Notice'|", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd36", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "d841ffc9855dcc642901e8abf28dee20b0485864" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/gradlew.bat", + "software_primaryPurpose" : "source", + "comment" : "BOMNOTE:File|", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd44", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "b86a8c3bab5a3ed0441b3fe3b1f6b31ec1ead901" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/gradlew", + "software_primaryPurpose" : "other", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd49", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "67174de726d5caae455cd22e9c4450e9c490ac6b" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/gradle/wrapper/gradle-wrapper.properties", + "software_primaryPurpose" : "other", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd54", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "9c55f0e3bd70363a02377f729d139a5d91325d40" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/build.gradle", + "software_primaryPurpose" : "other", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd60", + "type" : "software_File", + "software_copyrightText" : "NOASSERTION", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "15399fcbbe6f3ff84c82039d446d820ecbbc3ac6" + } ], + "software_attributionText" : [ "NOASSERTION" ], + "name" : "./App-BOM-ination-1.0/README.md", + "software_primaryPurpose" : "other", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd67", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "498cebd51a4483d6e68c2fc62d27008252fa4f7b" + } ], + "name" : "App-BOM-ination-1.0.zip", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd80", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "4e6be5af63e3373b4f0cbc4c151c13e059151e00" + } ], + "name" : "junit-4.12.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd85", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "42a25dc3219429f0e5d060061f71acb49bf010a0" + } ], + "name" : "hamcrest-core-1.3.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd91", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "5fe28b9518e58819180a43a850fbc0dd24b7c050" + } ], + "name" : "commons-lang3-3.4.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd97", + "type" : "software_File", + "verifiedUsing" : [ { + "type" : "Hash", + "algorithm" : "sha1", + "hashValue" : "466308a5554594190da5fe2c86b4a8e5037c37cc" + } ], + "name" : "slf4j-api-1.7.21.jar", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd3", + "type" : "software_Package", + "software_copyrightText" : "Copyright (c) 2016 Faust, Inc.", + "suppliedBy" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd69", + "verifiedUsing" : [ { + "type" : "PackageVerificationCode", + "algorithm" : "sha1", + "hashValue" : "be2fb65c6b22b81f1b273442d70479a41a3093e7" + } ], + "name" : "App-BOM-ination", + "software_sourceInfo" : "", + "comment" : "Faust proprietary notice was found in one or more source files. LGPL-2.0-or-later OR WTFPL was in a build configuration file and does not apply to the concluded license.", + "software_downloadLocation" : "https://github.com/act-project/App-BOM-ination/archive/refs/tags/1.0.zip", + "summary" : "A uniquely useless project with a cataclysmic software supply chain, to serve a test case for BOM solutions.", + "software_packageVersion" : "1.0", + "software_homePage" : "https://github.com/act-project/App-BOM-ination", + "description" : "A uniquely useless project with a cataclysmic software supply chain, to serve a test case for BOM solutions.", + "originatedBy" : [ "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd66" ], + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd29", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "summary" : "Files containing a Faust Proprietary Notice", + "software_homePage" : "https://github.com/act-project/App-BOM-ination/blob/master/src/main/java/com/github/appbomination/InsufficientKarmaException.java", + "description" : "Files containing a Faust Proprietary Notice", + "name" : "Faust Proprietary File", + "comment" : "Package info generated from Source Auditor package database", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd38", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "NOASSERTION", + "software_homePage" : "https://gradle.org/", + "name" : "Gradle", + "comment" : "Package info generated from Source Auditor package database", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd74", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "https://repo1.maven.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar", + "software_packageVersion" : "1.3", + "name" : "hamcrest-core", + "comment" : "Package info from Maven Central POM file", + "software_packageUrl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd76", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "https://repo1.maven.org/maven2/junit/junit/4.12/junit-4.12.jar", + "software_packageVersion" : "4.12", + "software_homePage" : "http://junit.org", + "name" : "junit", + "comment" : "Package info from Maven Central POM file", + "software_packageUrl" : "pkg:maven/junit/junit@4.12", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd88", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.4/commons-lang3-3.4.jar", + "software_packageVersion" : "3.4", + "software_homePage" : "http://commons.apache.org/proper/commons-lang/", + "name" : "commons-lang3", + "comment" : "Package info from Maven Central POM file", + "software_packageUrl" : "pkg:maven/org.apache.commons/commons-lang3@3.4", + "creationInfo" : "_:creationInfo_0" + }, { + "spdxId" : "http://www.sourceauditor.com/spdxdocs/appbomination-src/e3b71037-57de-44c9-8b7f-4e8a62f45311-specv3/SPDXRef-gnrtd94", + "type" : "software_Package", + "software_copyrightText" : "NOASSERTION", + "software_downloadLocation" : "https://repo1.maven.org/maven2/org/slf4j/slf4j-api/1.7.21/slf4j-api-1.7.21.jar", + "software_packageVersion" : "1.7.21", + "software_homePage" : "http://www.slf4j.org", + "name" : "slf4j-api", + "comment" : "Package info from Maven Central POM file", + "software_packageUrl" : "pkg:maven/org.slf4j/slf4j-api@1.7.21", + "creationInfo" : "_:creationInfo_0" + } ] +} \ No newline at end of file