# scores

updated_at: 2023-03-06 11:45:17
score_json:
{
  "run_id": "de8c0fef-456a-43b9-aff9-0be59e1e5fe8",
  "timestamp": "2023-03-06T11:45:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.17.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.921875,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 16 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.6875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:15, total:16"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have names"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T11:45:16+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5,
          "max_score": 10,
          "description": "8/16 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "16/16 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/16 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 11:45:23
score_json:
{
  "run_id": "f57d337d-85f0-4ea2-a623-49a7ec8324a9",
  "timestamp": "2023-03-06T11:45:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.17.2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.602941176470587,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T11:45:22.991635Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.705882352941177,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:16, total:17"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.294117647058823,
          "max_score": 10,
          "description": "8/17 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/17 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/17 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 17 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "17/17 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.411764705882353,
          "max_score": 10,
          "description": "16/17 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "17/17 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.823529411764707,
          "max_score": 10,
          "description": "15/17 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/17 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/17 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.823529411764707,
          "max_score": 10,
          "description": "15/17 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 11:45:28
score_json:
{
  "run_id": "ae4b814f-66c6-4e1f-84a6-223a592fedc9",
  "timestamp": "2023-03-06T11:45:28Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.17.2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.602941176470589,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "17/17 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.823529411764707,
          "max_score": 10,
          "description": "15/17 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/17 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T11:45:27.849444Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.823529411764707,
          "max_score": 10,
          "description": "15/17 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.294117647058823,
          "max_score": 10,
          "description": "8/17 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/17 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 17 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.411764705882353,
          "max_score": 10,
          "description": "16/17 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.705882352941177,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:16, total:17"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "17/17 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/17 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/17 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 11:45:40
score_json:
{
  "run_id": "29649f2d-6c44-46c7-825f-c0ce3e22d56c",
  "timestamp": "2023-03-06T11:45:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rakudo-star-2022.07.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.417787021854887,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/167 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "167/167 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 167 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.802395209580839,
          "max_score": 10,
          "description": "147/167 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "167/167 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.559333251469004,
          "max_score": 10,
          "description": "143/167 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.5748502994011973,
          "max_score": 10,
          "description": "124/167 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "167/167 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "167/167 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T11:45:39+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/167 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.97005988023952,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:167"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.449101796407185,
          "max_score": 10,
          "description": "76/167 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 11:45:48
score_json:
{
  "run_id": "b5043833-2a07-466d-90f3-6dabff69e536",
  "timestamp": "2023-03-06T11:45:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rakudo-star-2022.07.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.163735786529439,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "147/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.619047619047619,
          "max_score": 10,
          "description": "124/168 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T11:45:46.791029Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.518763349636386,
          "max_score": 10,
          "description": "143/168 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.94047619047619,
          "max_score": 10,
          "description": "167/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970238095238095,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:167, total:168"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.476190476190476,
          "max_score": 10,
          "description": "76/168 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 11:45:54
score_json:
{
  "run_id": "3c0201be-2944-4816-8c60-31e5595f3343",
  "timestamp": "2023-03-06T11:45:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rakudo-star-2022.07.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.163735786529439,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.94047619047619,
          "max_score": 10,
          "description": "167/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T11:45:54.099243Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "147/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.518763349636386,
          "max_score": 10,
          "description": "143/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970238095238095,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:167, total:168"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.619047619047619,
          "max_score": 10,
          "description": "124/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.476190476190476,
          "max_score": 10,
          "description": "76/168 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:14
score_json:
{
  "run_id": "25bd4de4-4fcd-44cd-95cf-dd05c785209e",
  "timestamp": "2023-03-06T12:10:14Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.5.0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.0414682330566265,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/582 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982817869415808,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:580, total:582"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "582/582 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "582/582 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:10.79191Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8213058419243986,
          "max_score": 10,
          "description": "106/582 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/582 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/582 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965635738831615,
          "max_score": 10,
          "description": "580/582 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.209621993127147,
          "max_score": 10,
          "description": "46/582 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 585 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4822856233318575,
          "max_score": 10,
          "description": "105/582 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.367697594501719,
          "max_score": 10,
          "description": "95/582 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:22
score_json:
{
  "run_id": "114634d2-9032-4ce3-a7e2-41b4378c4703",
  "timestamp": "2023-03-06T12:10:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.5.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.0414682330566265,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4822856233318575,
          "max_score": 10,
          "description": "105/582 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.367697594501719,
          "max_score": 10,
          "description": "95/582 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965635738831615,
          "max_score": 10,
          "description": "580/582 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:19.901025Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.209621993127147,
          "max_score": 10,
          "description": "46/582 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "582/582 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 585 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/582 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/582 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982817869415808,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:580, total:582"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/582 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "582/582 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8213058419243986,
          "max_score": 10,
          "description": "106/582 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:28
score_json:
{
  "run_id": "3831bd94-b3f7-43e9-95c8-eb1216643f8d",
  "timestamp": "2023-03-06T12:10:28Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_memcached-1-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.479057397403683,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.534653465346535,
          "max_score": 10,
          "description": "35/101 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.811881188118813,
          "max_score": 10,
          "description": "89/101 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.782178217821782,
          "max_score": 10,
          "description": "83/101 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9504950495049505,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:100, total:101"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:27+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.501940027281576,
          "max_score": 10,
          "description": "89/101 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "101/101 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:33
score_json:
{
  "run_id": "efae61e7-720b-4b0c-9a5f-37dd8e1cecdc",
  "timestamp": "2023-03-06T12:10:33Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_memcached-1-bullseye.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.221784084558348,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.901960784313726,
          "max_score": 10,
          "description": "101/102 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.425877769598324,
          "max_score": 10,
          "description": "89/102 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.950980392156863,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:101, total:102"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 102 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:32.721511Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.725490196078432,
          "max_score": 10,
          "description": "89/102 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.8627450980392157,
          "max_score": 10,
          "description": "83/102 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/102 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.568627450980392,
          "max_score": 10,
          "description": "35/102 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:38
score_json:
{
  "run_id": "cb467f8c-966e-4c85-a40b-f806279107e3",
  "timestamp": "2023-03-06T12:10:38Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_memcached-1-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.221784084558348,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 102 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.568627450980392,
          "max_score": 10,
          "description": "35/102 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.901960784313726,
          "max_score": 10,
          "description": "101/102 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.950980392156863,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:101, total:102"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/102 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:38.048689Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.725490196078432,
          "max_score": 10,
          "description": "89/102 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.425877769598324,
          "max_score": 10,
          "description": "89/102 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.8627450980392157,
          "max_score": 10,
          "description": "83/102 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:43
score_json:
{
  "run_id": "421f7126-064a-4b18-8dfd-950f0e36c9e9",
  "timestamp": "2023-03-06T12:10:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_irssi-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.041666666666668,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/48 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.270833333333334,
          "max_score": 10,
          "description": "46/48 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.375,
          "max_score": 10,
          "description": "3/48 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 48 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.583333333333334,
          "max_score": 10,
          "description": "46/48 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:42+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.895833333333333,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:47, total:48"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "48/48 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have versions"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/48 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.708333333333334,
          "max_score": 10,
          "description": "11/48 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:48
score_json:
{
  "run_id": "44850dc8-15f0-4a94-b221-3cd54e1f3ec2",
  "timestamp": "2023-03-06T12:10:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_irssi-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.7653061224489806,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/49 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.081632653061224,
          "max_score": 10,
          "description": "46/49 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.755102040816326,
          "max_score": 10,
          "description": "11/49 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.8979591836734695,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:48, total:49"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 49 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "3/49 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.795918367346939,
          "max_score": 10,
          "description": "48/49 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:47.839709Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "46/49 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:52
score_json:
{
  "run_id": "350583b0-ac53-4f29-af39-d1d75880aff2",
  "timestamp": "2023-03-06T12:10:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_irssi-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.765306122448979,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "3/49 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.795918367346939,
          "max_score": 10,
          "description": "48/49 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.755102040816326,
          "max_score": 10,
          "description": "11/49 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/49 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "46/49 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 49 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:52.60427Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.081632653061224,
          "max_score": 10,
          "description": "46/49 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.8979591836734695,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:48, total:49"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:10:58
score_json:
{
  "run_id": "7d33e5c3-98ba-461d-bd6f-687aa92bdc2a",
  "timestamp": "2023-03-06T12:10:58Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3.0-onbuild.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.692613114224957,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "570/570 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.75577105642895,
          "max_score": 10,
          "description": "428/570 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "570/570 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:10:57+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.947368421052631,
          "max_score": 10,
          "description": "231/570 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "570/570 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/570 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.508771929824562,
          "max_score": 10,
          "description": "85/570 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "570/570 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 570 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.6491228070175445,
          "max_score": 10,
          "description": "436/570 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/570 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991228070175438,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:569, total:570"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:11:04
score_json:
{
  "run_id": "99d9f175-d649-4263-8df5-f292995bbd6f",
  "timestamp": "2023-03-06T12:11:04Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3.0-onbuild.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.438812960786299,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.961538461538462,
          "max_score": 10,
          "description": "231/572 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9825174825174825,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:570, total:572"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.513986013986013,
          "max_score": 10,
          "description": "85/572 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 572 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:11:03.96686Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.622377622377622,
          "max_score": 10,
          "description": "436/572 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/572 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.730804670271452,
          "max_score": 10,
          "description": "428/572 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965034965034965,
          "max_score": 10,
          "description": "570/572 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:11:09
score_json:
{
  "run_id": "64ca3dd6-ef57-4052-8af3-57e2453e4442",
  "timestamp": "2023-03-06T12:11:09Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3.0-onbuild.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.438812960786299,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.961538461538462,
          "max_score": 10,
          "description": "231/572 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9825174825174825,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:570, total:572"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.513986013986013,
          "max_score": 10,
          "description": "85/572 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965034965034965,
          "max_score": 10,
          "description": "570/572 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:11:08.999109Z"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 572 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.622377622377622,
          "max_score": 10,
          "description": "436/572 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/572 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.730804670271452,
          "max_score": 10,
          "description": "428/572 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:11:52
score_json:
{
  "run_id": "4591c2c4-54f3-4962-bbd7-b34e8967eba4",
  "timestamp": "2023-03-06T12:11:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.1.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.380080141781687,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "269/269 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "269/269 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:11:49+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/269 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.431226765799256,
          "max_score": 10,
          "description": "96/269 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.951672862453532,
          "max_score": 10,
          "description": "187/269 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.222420679499924,
          "max_score": 10,
          "description": "181/269 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "269/269 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/269 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "269/269 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.014869888475837,
          "max_score": 10,
          "description": "161/269 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981412639405204,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:268, total:269"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 269 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:11:58
score_json:
{
  "run_id": "bd600a0b-9dc8-47ba-a4d0-92fa41bba40b",
  "timestamp": "2023-03-06T12:11:58Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.1.2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.12760406148449,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.962962962962964,
          "max_score": 10,
          "description": "269/270 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981481481481482,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:269, total:270"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.444444444444445,
          "max_score": 10,
          "description": "96/270 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 270 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.037037037037037,
          "max_score": 10,
          "description": "161/270 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:11:57.843835Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.925925925925926,
          "max_score": 10,
          "description": "187/270 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.20022937783796,
          "max_score": 10,
          "description": "181/270 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/270 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:12:03
score_json:
{
  "run_id": "fddf8675-152b-4d33-8fc1-a5089efb9b2e",
  "timestamp": "2023-03-06T12:12:03Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.1.2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.127604061484492,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 270 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.925925925925926,
          "max_score": 10,
          "description": "187/270 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.962962962962964,
          "max_score": 10,
          "description": "269/270 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.037037037037037,
          "max_score": 10,
          "description": "161/270 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/270 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.444444444444445,
          "max_score": 10,
          "description": "96/270 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:12:02.951921Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.20022937783796,
          "max_score": 10,
          "description": "181/270 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981481481481482,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:269, total:270"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:13:11
score_json:
{
  "run_id": "d1049d97-c660-418f-81f4-91136747a90e",
  "timestamp": "2023-03-06T12:13:11Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.382758696058818,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "486/486 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 486 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/486 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.8383014931927972,
          "max_score": 10,
          "description": "221/486 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "486/486 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.711934156378601,
          "max_score": 10,
          "description": "229/486 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.292181069958847,
          "max_score": 10,
          "description": "83/486 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/486 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "486/486 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:13:08+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.823045267489712,
          "max_score": 10,
          "description": "203/486 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.989711934156379,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:485, total:486"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "486/486 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:13:17
score_json:
{
  "run_id": "42f53773-004b-4055-ade2-e77b2e7f6478",
  "timestamp": "2023-03-06T12:13:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.129600584547016,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.840163934426229,
          "max_score": 10,
          "description": "203/488 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.299180327868852,
          "max_score": 10,
          "description": "83/488 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/488 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.979508196721312,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:486, total:488"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/488 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "488/488 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 504 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959016393442624,
          "max_score": 10,
          "description": "486/488 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.692622950819672,
          "max_score": 10,
          "description": "229/488 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/488 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "488/488 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:13:16.99866Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.8215198876616374,
          "max_score": 10,
          "description": "221/488 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:13:23
score_json:
{
  "run_id": "6b8b326a-4afe-4657-b57a-d1bd72ed90b6",
  "timestamp": "2023-03-06T12:13:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.129600584547018,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959016393442624,
          "max_score": 10,
          "description": "486/488 have versions"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/488 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.840163934426229,
          "max_score": 10,
          "description": "203/488 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:13:22.825323Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/488 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.8215198876616374,
          "max_score": 10,
          "description": "221/488 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "488/488 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "488/488 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 504 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/488 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.299180327868852,
          "max_score": 10,
          "description": "83/488 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.692622950819672,
          "max_score": 10,
          "description": "229/488 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.979508196721312,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:486, total:488"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:13:37
score_json:
{
  "run_id": "ab209579-a844-4955-a166-101b350fca32",
  "timestamp": "2023-03-06T12:13:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-1.9-slim.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.492434300108933,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/96 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "96/96 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:13:35+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.9791666666666665,
          "max_score": 10,
          "description": "77/96 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.947916666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:95, total:96"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "96/96 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "96/96 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/96 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 96 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.333333333333334,
          "max_score": 10,
          "description": "80/96 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.400769335511982,
          "max_score": 10,
          "description": "80/96 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.1875,
          "max_score": 10,
          "description": "27/96 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "96/96 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:13:42
score_json:
{
  "run_id": "67defd7f-a5be-4a2c-bca9-73bd6dc13b7f",
  "timestamp": "2023-03-06T12:13:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-1.9-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.234648168016877,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:13:42.477824Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.3218293397189695,
          "max_score": 10,
          "description": "80/97 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.216494845360825,
          "max_score": 10,
          "description": "27/97 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/97 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/97 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.0618556701030926,
          "max_score": 10,
          "description": "77/97 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.896907216494846,
          "max_score": 10,
          "description": "96/97 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.24742268041237,
          "max_score": 10,
          "description": "80/97 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/97 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 97 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.948453608247423,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:96, total:97"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:13:47
score_json:
{
  "run_id": "6dec28f4-0259-4593-a564-f14223f69047",
  "timestamp": "2023-03-06T12:13:47Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-1.9-slim.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.234648168016875,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 97 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/97 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.3218293397189695,
          "max_score": 10,
          "description": "80/97 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.0618556701030926,
          "max_score": 10,
          "description": "77/97 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.948453608247423,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:96, total:97"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/97 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.896907216494846,
          "max_score": 10,
          "description": "96/97 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:13:47.561403Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.24742268041237,
          "max_score": 10,
          "description": "80/97 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/97 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.216494845360825,
          "max_score": 10,
          "description": "27/97 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:35:46
score_json:
{
  "run_id": "1cfc3599-bcb3-470f-a366-15a4a86378dd",
  "timestamp": "2023-03-06T12:35:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_arangodb-3.10.3.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.90177065767285,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:35:43.627339Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.156829679595278,
          "max_score": 10,
          "description": "543/593 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/593 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.173693086003373,
          "max_score": 10,
          "description": "544/593 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.974704890387859,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:590, total:593"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.983136593591906,
          "max_score": 10,
          "description": "1/593 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "593/593 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/593 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "593/593 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.949409780775717,
          "max_score": 10,
          "description": "590/593 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 593 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/593 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.797639123102867,
          "max_score": 10,
          "description": "12/593 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:36:39
score_json:
{
  "run_id": "f6473075-ed9c-4bd7-9c9b-7ac5ac83dbbd",
  "timestamp": "2023-03-06T12:36:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kibana-7.17.8.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.095703403824679,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.627507163323783,
          "max_score": 10,
          "description": "1008/1047 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1047 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "1047/1047 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:36:34+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.130850047755493,
          "max_score": 10,
          "description": "91/1047 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1047 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1047/1047 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1047 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.044890162368674,
          "max_score": 10,
          "description": "100/1047 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.995224450811843,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1046, total:1047"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.115596252233786,
          "max_score": 10,
          "description": "996/1047 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "1047/1047 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1047/1047 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:36:49
score_json:
{
  "run_id": "a06fffa0-3329-4f91-a568-a99b98d4b3d4",
  "timestamp": "2023-03-06T12:36:49Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kibana-7.17.8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.842172205235099,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1049 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.980934223069589,
          "max_score": 10,
          "description": "1047/1049 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1049 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1049/1049 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9904671115347945,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1047, total:1049"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1049 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.609151572926596,
          "max_score": 10,
          "description": "1008/1049 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1049 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1049/1049 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:36:44.934377Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.083672894025131,
          "max_score": 10,
          "description": "996/1049 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.046711153479505,
          "max_score": 10,
          "description": "100/1049 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.132507149666349,
          "max_score": 10,
          "description": "91/1049 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:36:56
score_json:
{
  "run_id": "0aaea759-66ab-4fb5-9f0c-411facd6ab85",
  "timestamp": "2023-03-06T12:36:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kibana-7.17.8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.842172205235099,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.046711153479505,
          "max_score": 10,
          "description": "100/1049 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9904671115347945,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1047, total:1049"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:36:55.135191Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.083672894025131,
          "max_score": 10,
          "description": "996/1049 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1049 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.980934223069589,
          "max_score": 10,
          "description": "1047/1049 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1049 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1049/1049 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1049/1049 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.609151572926596,
          "max_score": 10,
          "description": "1008/1049 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1049 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.132507149666349,
          "max_score": 10,
          "description": "91/1049 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1049 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:02
score_json:
{
  "run_id": "550cc7cb-9e27-4ef4-94a6-48d9530713ce",
  "timestamp": "2023-03-06T12:37:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-libgazebo9.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.370104392535305,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.526080476900149,
          "max_score": 10,
          "description": "505/671 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:01+00:00"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 671 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.1964246614363345,
          "max_score": 10,
          "description": "471/671 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.992548435171386,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:670, total:671"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "671/671 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "671/671 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/671 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.023845007451564,
          "max_score": 10,
          "description": "401/671 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/671 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "671/671 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.663189269746647,
          "max_score": 10,
          "description": "291/671 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "671/671 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:07
score_json:
{
  "run_id": "7824e090-9663-4ded-83ff-65c5e23ed2df",
  "timestamp": "2023-03-06T12:37:07Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-libgazebo9.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.117984464600747,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "672/672 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.985119047619047,
          "max_score": 10,
          "description": "671/672 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 672 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.032738095238095,
          "max_score": 10,
          "description": "401/672 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.992559523809524,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:671, total:672"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:07.126913Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5148809523809526,
          "max_score": 10,
          "description": "505/672 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.669642857142857,
          "max_score": 10,
          "description": "291/672 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/672 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "672/672 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/672 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.164748815824457,
          "max_score": 10,
          "description": "471/672 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/672 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:17
score_json:
{
  "run_id": "5d291312-4092-464d-9616-09af7182558c",
  "timestamp": "2023-03-06T12:37:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-libgazebo9.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.117984464600745,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 672 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.669642857142857,
          "max_score": 10,
          "description": "291/672 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/672 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.985119047619047,
          "max_score": 10,
          "description": "671/672 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "672/672 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/672 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "672/672 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5148809523809526,
          "max_score": 10,
          "description": "505/672 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.164748815824457,
          "max_score": 10,
          "description": "471/672 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.032738095238095,
          "max_score": 10,
          "description": "401/672 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:13.785305Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/672 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.992559523809524,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:671, total:672"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:22
score_json:
{
  "run_id": "29211c42-3eb2-446d-aeb1-3b7f086bc5b4",
  "timestamp": "2023-03-06T12:37:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_celery-3.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.538211382113824,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "123/123 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/123 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "123/123 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:22+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.601626016260163,
          "max_score": 10,
          "description": "91/123 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959349593495935,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:122, total:123"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.292682926829269,
          "max_score": 10,
          "description": "102/123 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/123 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "123/123 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "123/123 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 123 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.2682926829268295,
          "max_score": 10,
          "description": "99/123 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.642276422764228,
          "max_score": 10,
          "description": "29/123 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:27
score_json:
{
  "run_id": "b1f73653-1e3f-49fb-9a31-376dfe6f039f",
  "timestamp": "2023-03-06T12:37:27Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_celery-3.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.273497435897435,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.16,
          "max_score": 10,
          "description": "102/125 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.72,
          "max_score": 10,
          "description": "91/125 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/125 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.84,
          "max_score": 10,
          "description": "123/125 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 125 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.92,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:123, total:125"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.68,
          "max_score": 10,
          "description": "29/125 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:27.115751Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.1499487179487184,
          "max_score": 10,
          "description": "99/125 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:32
score_json:
{
  "run_id": "d162c5b6-4628-40d4-8942-55148fb7490e",
  "timestamp": "2023-03-06T12:37:32Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nginx-mainline.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.440582858217297,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.2867132867132867,
          "max_score": 10,
          "description": "96/143 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "143/143 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "143/143 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:31+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.294174646863433,
          "max_score": 10,
          "description": "110/143 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 143 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.972027972027972,
          "max_score": 10,
          "description": "114/143 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.293706293706293,
          "max_score": 10,
          "description": "53/143 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "143/143 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.965034965034965,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:142, total:143"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "143/143 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/143 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/143 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:37
score_json:
{
  "run_id": "1a13b136-6167-46e7-bbf0-90046e337ad6",
  "timestamp": "2023-03-06T12:37:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nginx-mainline.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.189170334807312,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/144 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 144 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.965277777777778,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:143, total:144"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/144 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "144/144 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.916666666666666,
          "max_score": 10,
          "description": "114/144 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "144/144 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.318128918368478,
          "max_score": 10,
          "description": "111/144 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.263888888888889,
          "max_score": 10,
          "description": "97/144 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/144 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.388888888888888,
          "max_score": 10,
          "description": "52/144 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.930555555555555,
          "max_score": 10,
          "description": "143/144 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:36.951376Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:37:42
score_json:
{
  "run_id": "0373815e-623e-4052-809e-8f32abc4ad3b",
  "timestamp": "2023-03-06T12:37:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nginx-mainline.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.185698112585092,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "144/144 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:37:41.73126Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.248684473924033,
          "max_score": 10,
          "description": "110/144 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.965277777777778,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:143, total:144"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/144 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.333333333333333,
          "max_score": 10,
          "description": "96/144 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.930555555555555,
          "max_score": 10,
          "description": "143/144 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "144/144 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.916666666666666,
          "max_score": 10,
          "description": "114/144 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/144 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 144 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/144 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.319444444444445,
          "max_score": 10,
          "description": "53/144 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:54:31
score_json:
{
  "run_id": "94a0351b-4aac-4a55-be05-cc1b8cab6f42",
  "timestamp": "2023-03-06T12:54:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mongo-6.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.156636240058032,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.866666666666667,
          "max_score": 10,
          "description": "148/150 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:54:29.96483Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.5327248011606605,
          "max_score": 10,
          "description": "122/150 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 150 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.5333333333333337,
          "max_score": 10,
          "description": "112/150 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.933333333333334,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:148, total:150"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/150 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6,
          "max_score": 10,
          "description": "60/150 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.266666666666666,
          "max_score": 10,
          "description": "124/150 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:54:36
score_json:
{
  "run_id": "19184107-81ff-459d-bce0-4f4c7e5a2aa5",
  "timestamp": "2023-03-06T12:54:36Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mongo-6.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.153302906724699,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.6,
          "max_score": 10,
          "description": "111/150 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 150 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/150 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:54:36.386764Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.933333333333334,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:148, total:150"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.933333333333334,
          "max_score": 10,
          "description": "61/150 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.466058134493993,
          "max_score": 10,
          "description": "121/150 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.866666666666667,
          "max_score": 10,
          "description": "148/150 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.266666666666666,
          "max_score": 10,
          "description": "124/150 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:59:22
score_json:
{
  "run_id": "cd9cbdce-1358-418e-b72d-35535793a043",
  "timestamp": "2023-03-06T12:59:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.6.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.294772829027015,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.212328767123289,
          "max_score": 10,
          "description": "46/584 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:59:18+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8150684931506849,
          "max_score": 10,
          "description": "106/584 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.373287671232877,
          "max_score": 10,
          "description": "95/584 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "584/584 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.503333292869095,
          "max_score": 10,
          "description": "105/584 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:59:31
score_json:
{
  "run_id": "bfbdc571-f779-480f-9cec-1c86e55e714a",
  "timestamp": "2023-03-06T12:59:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.6.2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.041185173445319,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/586 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:59:28.539996Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.378839590443686,
          "max_score": 10,
          "description": "95/586 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 589 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982935153583617,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:584, total:586"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.215017064846418,
          "max_score": 10,
          "description": "46/586 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8088737201365188,
          "max_score": 10,
          "description": "106/586 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.47216763272891,
          "max_score": 10,
          "description": "105/586 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965870307167235,
          "max_score": 10,
          "description": "584/586 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 12:59:38
score_json:
{
  "run_id": "ad8eb887-0124-4c31-b3fd-d322c6bd2b91",
  "timestamp": "2023-03-06T12:59:38Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.6.2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.041185173445319,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 589 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T12:59:37.312682Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/586 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.215017064846418,
          "max_score": 10,
          "description": "46/586 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8088737201365188,
          "max_score": 10,
          "description": "106/586 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.378839590443686,
          "max_score": 10,
          "description": "95/586 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982935153583617,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:584, total:586"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.47216763272891,
          "max_score": 10,
          "description": "105/586 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965870307167235,
          "max_score": 10,
          "description": "584/586 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 13:00:15
score_json:
{
  "run_id": "ad236a03-5ac3-4c47-855e-6bcaed7a4c40",
  "timestamp": "2023-03-06T13:00:15Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jruby-9.4.1.0-jdk17.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.66710410546257,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.967580117219546,
          "max_score": 10,
          "description": "193/251 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "251/251 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "251/251 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "251/251 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T13:00:12+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.657370517928287,
          "max_score": 10,
          "description": "109/251 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/251 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "251/251 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 251 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.729083665338646,
          "max_score": 10,
          "description": "194/251 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/251 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9800796812749,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:250, total:251"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.00796812749004,
          "max_score": 10,
          "description": "50/251 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 13:00:23
score_json:
{
  "run_id": "a753a5f7-4e38-45d3-aa37-eb7b0168e51a",
  "timestamp": "2023-03-06T13:00:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jruby-9.4.1.0-jdk17.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.401300432906633,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.031496062992126,
          "max_score": 10,
          "description": "50/254 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 255 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T13:00:21.62373Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.8252212565578585,
          "max_score": 10,
          "description": "193/254 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/254 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.881889763779528,
          "max_score": 10,
          "description": "251/254 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.637795275590551,
          "max_score": 10,
          "description": "194/254 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/254 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940944881889764,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:251, total:254"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/254 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.708661417322834,
          "max_score": 10,
          "description": "109/254 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 13:00:29
score_json:
{
  "run_id": "0d059ff8-ebd4-4998-842c-de41ad745ed4",
  "timestamp": "2023-03-06T13:00:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jruby-9.4.1.0-jdk17.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.401300432906633,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.881889763779528,
          "max_score": 10,
          "description": "251/254 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.8252212565578585,
          "max_score": 10,
          "description": "193/254 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.708661417322834,
          "max_score": 10,
          "description": "109/254 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T13:00:28.603232Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940944881889764,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:251, total:254"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/254 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.031496062992126,
          "max_score": 10,
          "description": "50/254 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/254 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 255 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.637795275590551,
          "max_score": 10,
          "description": "194/254 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/254 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 13:00:35
score_json:
{
  "run_id": "f1a009a6-2869-4b10-b332-636c264e730c",
  "timestamp": "2023-03-06T13:00:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_perl-threaded-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.37519162822049,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "410/410 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 410 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.804878048780488,
          "max_score": 10,
          "description": "172/410 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "410/410 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T13:00:34+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/410 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8048780487804876,
          "max_score": 10,
          "description": "254/410 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987804878048781,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:409, total:410"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/410 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.3940764668488335,
          "max_score": 10,
          "description": "295/410 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "410/410 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.512195121951219,
          "max_score": 10,
          "description": "308/410 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "410/410 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 13:00:44
score_json:
{
  "run_id": "37338743-1f86-4d0a-9025-67d02251bc70",
  "timestamp": "2023-03-06T13:00:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_perl-threaded-bullseye.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.123576900321021,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.815085158150851,
          "max_score": 10,
          "description": "172/411 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/411 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "411/411 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975669099756692,
          "max_score": 10,
          "description": "410/411 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.379080585495843,
          "max_score": 10,
          "description": "295/411 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8199513381995134,
          "max_score": 10,
          "description": "254/411 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987834549878346,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:410, total:411"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/411 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "411/411 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T13:00:41.503546Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.4939172749391725,
          "max_score": 10,
          "description": "308/411 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 411 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/411 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 13:00:50
score_json:
{
  "run_id": "07ef2aa1-83f8-4dfb-b675-557061dd0fcd",
  "timestamp": "2023-03-06T13:00:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_perl-threaded-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.123576900321021,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987834549878346,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:410, total:411"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/411 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "411/411 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T13:00:49.172366Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.4939172749391725,
          "max_score": 10,
          "description": "308/411 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8199513381995134,
          "max_score": 10,
          "description": "254/411 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.815085158150851,
          "max_score": 10,
          "description": "172/411 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 411 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/411 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/411 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "411/411 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975669099756692,
          "max_score": 10,
          "description": "410/411 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.379080585495843,
          "max_score": 10,
          "description": "295/411 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:31:54
score_json:
{
  "run_id": "ea0f1567-964c-4318-b04a-b77af8e82d35",
  "timestamp": "2023-03-06T15:31:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_hylang-0-python3.11.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.211596286183783,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "114/114 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.82456140350877,
          "max_score": 10,
          "description": "112/114 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "114/114 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:31:53.674617Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.951223969289728,
          "max_score": 10,
          "description": "94/114 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/114 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.4035087719298245,
          "max_score": 10,
          "description": "41/114 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 114 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/114 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.508771929824562,
          "max_score": 10,
          "description": "97/114 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.631578947368421,
          "max_score": 10,
          "description": "84/114 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.912280701754385,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:112, total:114"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/114 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:32:02
score_json:
{
  "run_id": "0919f170-cbad-4f6e-a57e-9ae8c9dccd14",
  "timestamp": "2023-03-06T15:32:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_httpd-2-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.496905060489591,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 118 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "118/118 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "118/118 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "118/118 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.796610169491525,
          "max_score": 10,
          "description": "85/118 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:32:00+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/118 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/118 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "118/118 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.440677966101695,
          "max_score": 10,
          "description": "42/118 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.64406779661017,
          "max_score": 10,
          "description": "102/118 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.0991181589444,
          "max_score": 10,
          "description": "99/118 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9576271186440675,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:117, total:118"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:32:07
score_json:
{
  "run_id": "370bc0ad-e595-47b4-9443-308790da2786",
  "timestamp": "2023-03-06T15:32:07Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_httpd-2-bullseye.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.236319131302112,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.953273382344783,
          "max_score": 10,
          "description": "98/119 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/119 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.915966386554622,
          "max_score": 10,
          "description": "118/119 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.571428571428571,
          "max_score": 10,
          "description": "102/119 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.9411764705882355,
          "max_score": 10,
          "description": "84/119 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.386554621848739,
          "max_score": 10,
          "description": "43/119 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 119 relationships "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957983193277311,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:118, total:119"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:32:07.120242Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:32:12
score_json:
{
  "run_id": "0848ebeb-686a-4f58-be8d-67a0e984ae2e",
  "timestamp": "2023-03-06T15:32:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_httpd-2-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.240520811974382,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 119 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.571428571428571,
          "max_score": 10,
          "description": "102/119 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8571428571428568,
          "max_score": 10,
          "description": "85/119 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/119 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:32:12.560473Z"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.915966386554622,
          "max_score": 10,
          "description": "118/119 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.037306995790161,
          "max_score": 10,
          "description": "99/119 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957983193277311,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:118, total:119"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.470588235294118,
          "max_score": 10,
          "description": "42/119 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:35:30
score_json:
{
  "run_id": "018619d7-5c60-4a23-8051-d1b4ef0751ed",
  "timestamp": "2023-03-06T15:35:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.15.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.966666666666666,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "15/15 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "15/15 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 15 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/15 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:35:29+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.333333333333334,
          "max_score": 10,
          "description": "14/15 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "15/15 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.333333333333334,
          "max_score": 10,
          "description": "14/15 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6,
          "max_score": 10,
          "description": "6/15 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.666666666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:14, total:15"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/15 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "15/15 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/15 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:35:34
score_json:
{
  "run_id": "74d03f25-f487-40d8-a655-1401f0102dd4",
  "timestamp": "2023-03-06T15:35:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.15.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.640625,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/16 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:35:34.416138Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 16 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.6875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:15, total:16"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/16 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.25,
          "max_score": 10,
          "description": "6/16 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:35:39
score_json:
{
  "run_id": "d99f9050-035d-4fde-ad45-a4e07253c7a0",
  "timestamp": "2023-03-06T15:35:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.15.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.640625,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 16 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.6875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:15, total:16"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.25,
          "max_score": 10,
          "description": "6/16 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/16 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/16 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:35:39.087527Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:36:20
score_json:
{
  "run_id": "c4c7c253-2679-43e5-acff-f2c6b7209bf6",
  "timestamp": "2023-03-06T15:36:20Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-otp-24.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3854322058993604,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:36:18+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991423670668953,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:582, total:583"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "583/583 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 583 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.615780445969125,
          "max_score": 10,
          "description": "444/583 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6192109777015435,
          "max_score": 10,
          "description": "372/583 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.598867102549804,
          "max_score": 10,
          "description": "428/583 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.88336192109777,
          "max_score": 10,
          "description": "240/583 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:36:25
score_json:
{
  "run_id": "3bbc0d9f-facc-4560-8c64-4d8de7d9785c",
  "timestamp": "2023-03-06T15:36:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-otp-24.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.134250837088767,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:36:25.267914Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6301369863013697,
          "max_score": 10,
          "description": "372/584 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.5874140020493,
          "max_score": 10,
          "description": "428/584 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.982876712328768,
          "max_score": 10,
          "description": "583/584 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.602739726027398,
          "max_score": 10,
          "description": "444/584 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/584 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.89041095890411,
          "max_score": 10,
          "description": "240/584 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:36:31
score_json:
{
  "run_id": "2703e806-15e9-46a4-94e1-dd7bb9cf5bc3",
  "timestamp": "2023-03-06T15:36:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-otp-24.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.135107001472328,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:36:31.12857Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.6045372897205326,
          "max_score": 10,
          "description": "429/584 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/584 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.602739726027398,
          "max_score": 10,
          "description": "444/584 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.907534246575342,
          "max_score": 10,
          "description": "239/584 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.982876712328768,
          "max_score": 10,
          "description": "583/584 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.613013698630137,
          "max_score": 10,
          "description": "373/584 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:36:36
score_json:
{
  "run_id": "2a47c9b3-0360-46ce-9297-a61b0fd48f63",
  "timestamp": "2023-03-06T15:36:36Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_hello-world-linux.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 3.25,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 0,
          "max_score": 10,
          "description": "doc has 0 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/0 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:36:36+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 0,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:0, total:0"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/0 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:36:41
score_json:
{
  "run_id": "93c0025f-2c79-4345-8875-0000618ba55f",
  "timestamp": "2023-03-06T15:36:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_hello-world-linux.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:36:41.39324Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:36:46
score_json:
{
  "run_id": "f911573c-5e92-4255-9e16-689efd215a01",
  "timestamp": "2023-03-06T15:36:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_hello-world-linux.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:36:45.9768Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:38:09
score_json:
{
  "run_id": "9504fada-6a57-41a2-a0c2-cb4361b9879d",
  "timestamp": "2023-03-06T15:38:09Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.6.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.294772829027016,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.503333292869095,
          "max_score": 10,
          "description": "105/584 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8150684931506849,
          "max_score": 10,
          "description": "106/584 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.373287671232877,
          "max_score": 10,
          "description": "95/584 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "584/584 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.212328767123289,
          "max_score": 10,
          "description": "46/584 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:38:07+00:00"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:38:18
score_json:
{
  "run_id": "bd9f8f4f-9d79-483b-935e-01142fb1eda3",
  "timestamp": "2023-03-06T15:38:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.6.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.041185173445319,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982935153583617,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:584, total:586"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/586 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8088737201365188,
          "max_score": 10,
          "description": "106/586 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4721676327289097,
          "max_score": 10,
          "description": "105/586 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 589 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.378839590443686,
          "max_score": 10,
          "description": "95/586 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.215017064846418,
          "max_score": 10,
          "description": "46/586 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965870307167235,
          "max_score": 10,
          "description": "584/586 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:38:15.440846Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:38:25
score_json:
{
  "run_id": "b35242fd-c440-4feb-a346-2d2b748d8ee0",
  "timestamp": "2023-03-06T15:38:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.6.1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.041185173445319,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4721676327289097,
          "max_score": 10,
          "description": "105/586 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/586 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.215017064846418,
          "max_score": 10,
          "description": "46/586 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/586 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "586/586 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:38:24.059784Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.378839590443686,
          "max_score": 10,
          "description": "95/586 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982935153583617,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:584, total:586"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965870307167235,
          "max_score": 10,
          "description": "584/586 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 589 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8088737201365188,
          "max_score": 10,
          "description": "106/586 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:38:34
score_json:
{
  "run_id": "45c8bbbb-576f-4620-8fe6-b4aaf72b52a9",
  "timestamp": "2023-03-06T15:38:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.0.1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.258227170513616,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:38:31.606624Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.084282460136674,
          "max_score": 10,
          "description": "311/439 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.533029612756264,
          "max_score": 10,
          "description": "240/439 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977220956719818,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:437, total:439"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 439 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.954441913439636,
          "max_score": 10,
          "description": "437/439 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.835990888382688,
          "max_score": 10,
          "description": "95/439 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.779577578837259,
          "max_score": 10,
          "description": "302/439 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/439 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:39:47
score_json:
{
  "run_id": "abe82eb3-cdaf-4f71-8ca4-cc337c637b55",
  "timestamp": "2023-03-06T15:39:47Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zendserver-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.358043231142872,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:39:44+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "361/361 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/361 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.94459833795014,
          "max_score": 10,
          "description": "359/361 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.839335180055401,
          "max_score": 10,
          "description": "78/361 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 362 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/361 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958448753462604,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:358, total:361"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "361/361 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.900277008310249,
          "max_score": 10,
          "description": "148/361 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.753662406790971,
          "max_score": 10,
          "description": "168/361 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "361/361 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.7645429362880884,
          "max_score": 10,
          "description": "172/361 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:39:56
score_json:
{
  "run_id": "5432f392-94b3-4b93-94e1-c50c177833d6",
  "timestamp": "2023-03-06T15:39:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zendserver-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.103969107244508,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:39:53.904249Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.690952392824051,
          "max_score": 10,
          "description": "168/363 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/363 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "363/363 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "363/363 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 363 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.738292011019284,
          "max_score": 10,
          "description": "172/363 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.922865013774104,
          "max_score": 10,
          "description": "148/363 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/363 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.8512396694214885,
          "max_score": 10,
          "description": "78/363 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.917355371900827,
          "max_score": 10,
          "description": "360/363 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/363 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958677685950414,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:360, total:363"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:40:02
score_json:
{
  "run_id": "796378ea-d88e-484b-a58f-e03d7287f8a7",
  "timestamp": "2023-03-06T15:40:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zendserver-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.103969107244508,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "363/363 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 363 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:40:01.899612Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/363 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.8512396694214885,
          "max_score": 10,
          "description": "78/363 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.690952392824051,
          "max_score": 10,
          "description": "168/363 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/363 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "363/363 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.917355371900827,
          "max_score": 10,
          "description": "360/363 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.738292011019284,
          "max_score": 10,
          "description": "172/363 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958677685950414,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:360, total:363"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/363 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.922865013774104,
          "max_score": 10,
          "description": "148/363 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:40:11
score_json:
{
  "run_id": "b6917ef8-cb8b-41e2-aab5-da11beca09ab",
  "timestamp": "2023-03-06T15:40:11Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_owncloud-9.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.355406678941087,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.111810049409952,
          "max_score": 10,
          "description": "144/272 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 278 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/272 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "272/272 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.257352941176471,
          "max_score": 10,
          "description": "129/272 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.908088235294118,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:267, total:272"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "272/272 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "272/272 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:40:08+00:00"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/272 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.852941176470589,
          "max_score": 10,
          "description": "268/272 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.551470588235294,
          "max_score": 10,
          "description": "151/272 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.426470588235294,
          "max_score": 10,
          "description": "70/272 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:40:17
score_json:
{
  "run_id": "5608700c-bb35-46a0-85f2-edf7200bac69",
  "timestamp": "2023-03-06T15:40:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_owncloud-9.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.103095148887673,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.094870010720465,
          "max_score": 10,
          "description": "144/273 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.816849816849816,
          "max_score": 10,
          "description": "268/273 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.274725274725275,
          "max_score": 10,
          "description": "129/273 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/273 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.435897435897436,
          "max_score": 10,
          "description": "70/273 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.908424908424908,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:268, total:273"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.531135531135531,
          "max_score": 10,
          "description": "151/273 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 279 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:40:16.335198Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:40:25
score_json:
{
  "run_id": "0aaaead6-acbe-493f-95a7-aa71bae71fea",
  "timestamp": "2023-03-06T15:40:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_owncloud-9.1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.103095148887671,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.531135531135531,
          "max_score": 10,
          "description": "151/273 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/273 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.094870010720465,
          "max_score": 10,
          "description": "144/273 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.435897435897436,
          "max_score": 10,
          "description": "70/273 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.816849816849816,
          "max_score": 10,
          "description": "268/273 have versions"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 279 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.274725274725275,
          "max_score": 10,
          "description": "129/273 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.908424908424908,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:268, total:273"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:40:22.823687Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:40:34
score_json:
{
  "run_id": "70c9a3d2-f438-45cd-b055-033c5bc97ab7",
  "timestamp": "2023-03-06T15:40:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_orientdb-3.1-tp3.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.368459591511359,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/237 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "237/237 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "237/237 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "237/237 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.782693939931824,
          "max_score": 10,
          "description": "107/237 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.949367088607595,
          "max_score": 10,
          "description": "96/237 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.556962025316455,
          "max_score": 10,
          "description": "108/237 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "237/237 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 237 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/237 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.10126582278481,
          "max_score": 10,
          "description": "45/237 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:40:32+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.978902953586498,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:236, total:237"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:40:40
score_json:
{
  "run_id": "f8c8be36-e0a5-4024-b694-9796f3b00038",
  "timestamp": "2023-03-06T15:40:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_orientdb-3.1-tp3.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112184530022475,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "239/239 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/239 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.518828451882845,
          "max_score": 10,
          "description": "108/239 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 239 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.983263598326359,
          "max_score": 10,
          "description": "96/239 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958158995815899,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:237, total:239"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/239 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.117154811715482,
          "max_score": 10,
          "description": "45/239 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.916317991631798,
          "max_score": 10,
          "description": "237/239 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "239/239 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:40:39.932615Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.7499667510771224,
          "max_score": 10,
          "description": "107/239 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/239 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:41:24
score_json:
{
  "run_id": "5d0d54f4-ad9c-4a49-974d-089544fc3f0d",
  "timestamp": "2023-03-06T15:41:24Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zendserver-5.4.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.471961499388685,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 309 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.608414239482201,
          "max_score": 10,
          "description": "43/309 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/309 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:41:22+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.116504854368932,
          "max_score": 10,
          "description": "189/309 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/309 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.296835165767204,
          "max_score": 10,
          "description": "187/309 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "309/309 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "309/309 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "309/309 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.433656957928803,
          "max_score": 10,
          "description": "172/309 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.983818770226537,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:308, total:309"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "309/309 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:41:30
score_json:
{
  "run_id": "e6c46fe8-2e19-4606-9cc8-0f22aba1e263",
  "timestamp": "2023-03-06T15:41:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zendserver-5.4.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.214865861087728,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:41:29.611173Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/311 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/311 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.229793105998894,
          "max_score": 10,
          "description": "186/311 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.935691318327974,
          "max_score": 10,
          "description": "309/311 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "311/311 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.077170418006431,
          "max_score": 10,
          "description": "189/311 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.501607717041801,
          "max_score": 10,
          "description": "171/311 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.585209003215434,
          "max_score": 10,
          "description": "44/311 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 311 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.967845659163987,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:309, total:311"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/311 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "311/311 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:41:35
score_json:
{
  "run_id": "6976fe10-1e37-45e1-b9af-1d084cc332e3",
  "timestamp": "2023-03-06T15:41:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zendserver-5.4.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.214865861087726,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.229793105998894,
          "max_score": 10,
          "description": "186/311 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.585209003215434,
          "max_score": 10,
          "description": "44/311 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "311/311 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/311 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.967845659163987,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:309, total:311"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.935691318327974,
          "max_score": 10,
          "description": "309/311 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "311/311 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 311 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:41:35.365708Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/311 have supplier names"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.077170418006431,
          "max_score": 10,
          "description": "189/311 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.501607717041801,
          "max_score": 10,
          "description": "171/311 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/311 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:41:41
score_json:
{
  "run_id": "814f02d8-0753-491d-8fd3-480b96fbeef1",
  "timestamp": "2023-03-06T15:41:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_perl-stable-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.375191628220492,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.804878048780488,
          "max_score": 10,
          "description": "172/410 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "410/410 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 410 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.512195121951219,
          "max_score": 10,
          "description": "308/410 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/410 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8048780487804876,
          "max_score": 10,
          "description": "254/410 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "410/410 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "410/410 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/410 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:41:40+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "410/410 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.3940764668488335,
          "max_score": 10,
          "description": "295/410 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987804878048781,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:409, total:410"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-06 15:41:46
score_json:
{
  "run_id": "0e3e3ba7-6d24-44d6-8f85-3daaaeb98b75",
  "timestamp": "2023-03-06T15:41:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_perl-stable-bullseye.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.124793445333187,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/411 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987834549878346,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:410, total:411"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 411 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/411 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "411/411 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.839416058394161,
          "max_score": 10,
          "description": "171/411 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-06T15:41:46.025821Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.403411485739152,
          "max_score": 10,
          "description": "296/411 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.795620437956204,
          "max_score": 10,
          "description": "255/411 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/411 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975669099756692,
          "max_score": 10,
          "description": "410/411 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.4939172749391725,
          "max_score": 10,
          "description": "308/411 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "411/411 have names"
        }
      ]
    }
  ]
}


