# scores

updated_at: 2023-03-07 16:16:28
score_json:
{
  "run_id": "1316aebf-ef7f-45c8-bfae-529a61bbbcf5",
  "timestamp": "2023-03-07T16:16:28Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haskell-9.2.7-slim.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1561330609311655,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:16:28.235676Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/177 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.032265738397344,
          "max_score": 10,
          "description": "131/177 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.971751412429379,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:176, total:177"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "177/177 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/177 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.1073446327683616,
          "max_score": 10,
          "description": "122/177 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/177 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.55367231638418,
          "max_score": 10,
          "description": "61/177 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.943502824858758,
          "max_score": 10,
          "description": "176/177 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 177 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5141242937853105,
          "max_score": 10,
          "description": "133/177 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "177/177 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:14
score_json:
{
  "run_id": "15ba7e2c-0d9a-4fc9-9eee-31d1382baca4",
  "timestamp": "2023-03-07T16:17:14Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rocket.chat-5.1.5.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.197229649435531,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "2816/2816 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "2816/2816 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2816 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:07+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.683948863636363,
          "max_score": 10,
          "description": "2727/2816 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.645942420528819,
          "max_score": 10,
          "description": "2726/2816 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "2816/2816 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/2816 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.723011363636363,
          "max_score": 10,
          "description": "78/2816 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.998224431818182,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:2815, total:2816"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "2816/2816 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/2816 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.89346590909091,
          "max_score": 10,
          "description": "30/2816 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:17
score_json:
{
  "run_id": "9a5775d2-1b2f-479d-87ab-ab0ba6f421ec",
  "timestamp": "2023-03-07T16:17:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rocket.chat-5.1.5.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.946109252057357,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.996451383960255,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:2816, total:2818"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/2818 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "2818/2818 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/2818 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "2818/2818 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.893541518807664,
          "max_score": 10,
          "description": "30/2818 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2818 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.67707594038325,
          "max_score": 10,
          "description": "2727/2818 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.72320794889993,
          "max_score": 10,
          "description": "78/2818 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.639005481175563,
          "max_score": 10,
          "description": "2726/2818 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/2818 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.99290276792051,
          "max_score": 10,
          "description": "2816/2818 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:16.331383Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:20
score_json:
{
  "run_id": "7247c201-eef9-4049-a314-828aa05cc495",
  "timestamp": "2023-03-07T16:17:20Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rocket.chat-5.1.5.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.946109252057359,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.639005481175563,
          "max_score": 10,
          "description": "2726/2818 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.72320794889993,
          "max_score": 10,
          "description": "78/2818 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.893541518807664,
          "max_score": 10,
          "description": "30/2818 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/2818 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.99290276792051,
          "max_score": 10,
          "description": "2816/2818 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "2818/2818 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/2818 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "2818/2818 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:19.945241Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.996451383960255,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:2816, total:2818"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/2818 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2818 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.67707594038325,
          "max_score": 10,
          "description": "2727/2818 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:23
score_json:
{
  "run_id": "ced43835-5f5d-4436-a788-ab27ce76afe1",
  "timestamp": "2023-03-07T16:17:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kaazing-gateway-5.1.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.416412999799077,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:22+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.443037974683545,
          "max_score": 10,
          "description": "129/237 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.699568012859152,
          "max_score": 10,
          "description": "127/237 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/237 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "237/237 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 237 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.89451476793249,
          "max_score": 10,
          "description": "121/237 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.978902953586498,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:236, total:237"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "237/237 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/237 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "237/237 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "237/237 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.31223628691983,
          "max_score": 10,
          "description": "40/237 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:25
score_json:
{
  "run_id": "16a6a4c3-e9b8-4ab7-883d-f364b806f31f",
  "timestamp": "2023-03-07T16:17:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_node-lts-alpine3.16.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.223425196850393,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:25+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/254 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.980314960629921,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:253, total:254"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/254 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.921259842519685,
          "max_score": 10,
          "description": "252/254 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/254 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 254 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "254/254 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.645669291338582,
          "max_score": 10,
          "description": "9/254 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "254/254 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.921259842519685,
          "max_score": 10,
          "description": "252/254 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:27
score_json:
{
  "run_id": "dd7f4cbf-8c2e-4123-9a2f-76ac9d500746",
  "timestamp": "2023-03-07T16:17:27Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_node-lts-alpine3.16.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.9609375,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "256/256 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.6484375,
          "max_score": 10,
          "description": "9/256 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "256/256 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 256 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9609375,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:254, total:256"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/256 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/256 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.921875,
          "max_score": 10,
          "description": "254/256 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.84375,
          "max_score": 10,
          "description": "252/256 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/256 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:27.566222Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.84375,
          "max_score": 10,
          "description": "252/256 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/256 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:30
score_json:
{
  "run_id": "ada3d5c6-4962-4159-9e69-54809571e48c",
  "timestamp": "2023-03-07T16:17:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_hylang-0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.211596286183784,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "114/114 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "114/114 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.508771929824562,
          "max_score": 10,
          "description": "97/114 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.631578947368421,
          "max_score": 10,
          "description": "84/114 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.912280701754385,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:112, total:114"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.951223969289728,
          "max_score": 10,
          "description": "94/114 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.82456140350877,
          "max_score": 10,
          "description": "112/114 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/114 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.4035087719298245,
          "max_score": 10,
          "description": "41/114 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/114 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 114 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:29.850673Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/114 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:32
score_json:
{
  "run_id": "ba2f54cf-75c1-4aca-a5fb-6c33d580cde4",
  "timestamp": "2023-03-07T16:17:32Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_hylang-0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.211596286183784,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:31.942752Z"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.82456140350877,
          "max_score": 10,
          "description": "112/114 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.508771929824562,
          "max_score": 10,
          "description": "97/114 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/114 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.951223969289728,
          "max_score": 10,
          "description": "94/114 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.912280701754385,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:112, total:114"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "114/114 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 114 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/114 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "114/114 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.631578947368421,
          "max_score": 10,
          "description": "84/114 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/114 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.4035087719298245,
          "max_score": 10,
          "description": "41/114 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:34
score_json:
{
  "run_id": "aef82309-0c20-4808-9886-4479cccfeae2",
  "timestamp": "2023-03-07T16:17:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ros-noetic-ros-base-focal.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.443292212273231,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "542/542 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/542 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.990774907749078,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:541, total:542"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "542/542 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 542 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.797578562807792,
          "max_score": 10,
          "description": "366/542 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.125461254612547,
          "max_score": 10,
          "description": "210/542 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "542/542 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/542 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "542/542 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:34+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.881918819188192,
          "max_score": 10,
          "description": "373/542 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.070110701107011,
          "max_score": 10,
          "description": "213/542 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:37
score_json:
{
  "run_id": "b292afff-2c98-42c5-beb6-4ec03121cc4a",
  "timestamp": "2023-03-07T16:17:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ros-noetic-ros-base-focal.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.19058699452385,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.8692449355432785,
          "max_score": 10,
          "description": "373/543 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.760174512944751,
          "max_score": 10,
          "description": "366/543 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/543 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.98158379373849,
          "max_score": 10,
          "description": "542/543 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 543 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "543/543 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:36.553865Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/543 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.990791896869245,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:542, total:543"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "543/543 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.132596685082873,
          "max_score": 10,
          "description": "210/543 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/543 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.077348066298343,
          "max_score": 10,
          "description": "213/543 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:39
score_json:
{
  "run_id": "7a76241e-2eea-4c5a-8db3-4abe6509758b",
  "timestamp": "2023-03-07T16:17:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mariadb-10.5.19.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.152512579147434,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.551724137931034,
          "max_score": 10,
          "description": "50/145 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.793103448275862,
          "max_score": 10,
          "description": "113/145 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/145 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 145 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/145 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.931034482758621,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:143, total:145"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "145/145 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.862068965517242,
          "max_score": 10,
          "description": "143/145 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "145/145 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/145 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:38.827579Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.291630893293529,
          "max_score": 10,
          "description": "112/145 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.620689655172414,
          "max_score": 10,
          "description": "107/145 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:41
score_json:
{
  "run_id": "ad842630-b34b-4593-8d8e-825e3aeeca62",
  "timestamp": "2023-03-07T16:17:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-apache.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3654349086227455,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.607085269229101,
          "max_score": 10,
          "description": "149/248 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "248/248 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:41+00:00"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 248 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959677419354838,
          "max_score": 10,
          "description": "247/248 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.290322580645161,
          "max_score": 10,
          "description": "156/248 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.798387096774194,
          "max_score": 10,
          "description": "129/248 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959677419354839,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:246, total:248"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.693548387096774,
          "max_score": 10,
          "description": "82/248 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:43
score_json:
{
  "run_id": "6f731952-360a-4b09-a9d7-c71c16403588",
  "timestamp": "2023-03-07T16:17:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-apache.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112860306477108,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.586523398618462,
          "max_score": 10,
          "description": "149/249 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959839357429719,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:247, total:249"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.706827309236948,
          "max_score": 10,
          "description": "82/249 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.919678714859439,
          "max_score": 10,
          "description": "247/249 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:43.2086Z"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.265060240963855,
          "max_score": 10,
          "description": "156/249 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/249 components have primary purpose specified"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/249 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.8192771084337345,
          "max_score": 10,
          "description": "129/249 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "249/249 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 249 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/249 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "249/249 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:45
score_json:
{
  "run_id": "1258205f-57dc-4dda-b910-d7414f07c224",
  "timestamp": "2023-03-07T16:17:45Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-apache.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112860306477108,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.586523398618462,
          "max_score": 10,
          "description": "149/249 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.706827309236948,
          "max_score": 10,
          "description": "82/249 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:45.50913Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/249 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.919678714859439,
          "max_score": 10,
          "description": "247/249 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "249/249 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 249 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.265060240963855,
          "max_score": 10,
          "description": "156/249 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.8192771084337345,
          "max_score": 10,
          "description": "129/249 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/249 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "249/249 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959839357429719,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:247, total:249"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/249 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:47
score_json:
{
  "run_id": "fe8736f0-4964-4086-ae63-cd4ca4b71cfd",
  "timestamp": "2023-03-07T16:17:47Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rethinkdb-bullseye-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.184662059683935,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/136 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.2058823529411766,
          "max_score": 10,
          "description": "106/136 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.963235294117647,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:135, total:136"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 136 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:47.626716Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "136/136 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.882352941176471,
          "max_score": 10,
          "description": "56/136 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "136/136 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.926470588235293,
          "max_score": 10,
          "description": "135/136 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "119/136 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.9653000172080795,
          "max_score": 10,
          "description": "117/136 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/136 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/136 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:50
score_json:
{
  "run_id": "f06ad70a-7d9a-4bb9-9be9-0aab7b6ec9bd",
  "timestamp": "2023-03-07T16:17:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3-slim.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.9052083333333325,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "324/324 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 324 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.984567901234568,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:323, total:324"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "324/324 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "324/324 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/324 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.397376543209877,
          "max_score": 10,
          "description": "284/324 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.04320987654321,
          "max_score": 10,
          "description": "31/324 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.796296296296296,
          "max_score": 10,
          "description": "285/324 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.882716049382715,
          "max_score": 10,
          "description": "101/324 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/324 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "324/324 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:49+00:00"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:52
score_json:
{
  "run_id": "cf578503-65a6-4205-987d-cc2c3b489031",
  "timestamp": "2023-03-07T16:17:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.6488487100833735,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.969325153374234,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:324, total:326"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.079754601226993,
          "max_score": 10,
          "description": "30/326 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.375747207802425,
          "max_score": 10,
          "description": "285/326 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.871165644171779,
          "max_score": 10,
          "description": "102/326 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.938650306748468,
          "max_score": 10,
          "description": "324/326 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:52.259231Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 326 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.742331288343557,
          "max_score": 10,
          "description": "285/326 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:55
score_json:
{
  "run_id": "14a0f4b7-8c8a-4c6c-97e2-8360c8479ba3",
  "timestamp": "2023-03-07T16:17:55Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3-slim.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.6488487100833735,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.375747207802425,
          "max_score": 10,
          "description": "285/326 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.969325153374234,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:324, total:326"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.079754601226993,
          "max_score": 10,
          "description": "30/326 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 326 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.938650306748468,
          "max_score": 10,
          "description": "324/326 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:54.6409Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.742331288343557,
          "max_score": 10,
          "description": "285/326 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.871165644171779,
          "max_score": 10,
          "description": "102/326 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:57
score_json:
{
  "run_id": "39a42a41-b08f-45a5-9de8-6f8ddf955388",
  "timestamp": "2023-03-07T16:17:57Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mariadb-10.7-focal.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.405068253438488,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "146/146 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "146/146 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.876712328767123,
          "max_score": 10,
          "description": "115/146 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.320543150961524,
          "max_score": 10,
          "description": "114/146 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/146 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.931506849315069,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:144, total:146"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.438356164383562,
          "max_score": 10,
          "description": "52/146 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/146 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:56+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.602739726027397,
          "max_score": 10,
          "description": "108/146 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "146/146 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.931506849315069,
          "max_score": 10,
          "description": "145/146 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 146 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:17:59
score_json:
{
  "run_id": "533ebe7c-b0d5-40e8-b2dd-b3b106682ea2",
  "timestamp": "2023-03-07T16:17:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mariadb-10.7-focal.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.153838938614818,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:17:59.106855Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.530612244897958,
          "max_score": 10,
          "description": "51/147 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/147 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.5850340136054424,
          "max_score": 10,
          "description": "109/147 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.931972789115646,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:145, total:147"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/147 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "147/147 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "147/147 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 147 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.863945578231291,
          "max_score": 10,
          "description": "145/147 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.82312925170068,
          "max_score": 10,
          "description": "115/147 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/147 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.3420848947453194,
          "max_score": 10,
          "description": "115/147 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:18:01
score_json:
{
  "run_id": "0202d4aa-0788-487a-b6f7-18a68de3aa5f",
  "timestamp": "2023-03-07T16:18:01Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mariadb-10.7-focal.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1538389386148165,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.931972789115646,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:145, total:147"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "147/147 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:18:01.460641Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.82312925170068,
          "max_score": 10,
          "description": "115/147 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/147 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/147 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "147/147 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.5850340136054424,
          "max_score": 10,
          "description": "109/147 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.863945578231291,
          "max_score": 10,
          "description": "145/147 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 147 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.3420848947453194,
          "max_score": 10,
          "description": "115/147 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/147 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.530612244897958,
          "max_score": 10,
          "description": "51/147 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:24:50
score_json:
{
  "run_id": "3a20a8a4-ac5e-44ea-9515-49a9de195d06",
  "timestamp": "2023-03-07T16:24:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-1.9.4.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.364183892207224,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "537/537 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/537 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.059590316573557,
          "max_score": 10,
          "description": "319/537 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.990689013035381,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:536, total:537"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "537/537 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/537 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:24:47+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.983240223463687,
          "max_score": 10,
          "description": "375/537 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.049040972636112,
          "max_score": 10,
          "description": "357/537 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "537/537 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 537 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.201117318435754,
          "max_score": 10,
          "description": "204/537 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "537/537 have names"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:24:54
score_json:
{
  "run_id": "00b04805-a1b1-45a1-a1f1-d7cb9c16ce06",
  "timestamp": "2023-03-07T16:24:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elixir-1.9.4.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112970796611185,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "538/538 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 538 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/538 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.981412639405205,
          "max_score": 10,
          "description": "537/538 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.070631970260223,
          "max_score": 10,
          "description": "319/538 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/538 have checksums"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.970260223048327,
          "max_score": 10,
          "description": "375/538 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.03822634114565,
          "max_score": 10,
          "description": "357/538 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9907063197026025,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:537, total:538"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.20817843866171,
          "max_score": 10,
          "description": "204/538 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/538 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "538/538 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:24:53.938356Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:27:01
score_json:
{
  "run_id": "3aebe081-fa1b-476b-8750-2d6eece2268f",
  "timestamp": "2023-03-07T16:27:01Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_bonita-2021.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.317733310818417,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9763593380614655,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:421, total:423"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "423/423 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.4278959810874703,
          "max_score": 10,
          "description": "145/423 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.439716312056738,
          "max_score": 10,
          "description": "66/423 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.976359338061465,
          "max_score": 10,
          "description": "422/423 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/423 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.73758865248227,
          "max_score": 10,
          "description": "138/423 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "423/423 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:26:58+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.7967465946189347,
          "max_score": 10,
          "description": "145/423 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/423 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "423/423 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 423 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:29:08
score_json:
{
  "run_id": "6459f0d4-7bff-444d-9fae-37a4a1d2dbf6",
  "timestamp": "2023-03-07T16:29:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_bonita-2021.2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.062678517560871,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "425/425 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.4117647058823533,
          "max_score": 10,
          "description": "145/425 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.752941176470588,
          "max_score": 10,
          "description": "138/425 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.929411764705883,
          "max_score": 10,
          "description": "422/425 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.7476879982762337,
          "max_score": 10,
          "description": "145/425 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/425 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.447058823529412,
          "max_score": 10,
          "description": "66/425 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/425 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 426 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/425 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "425/425 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:29:05.265895Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.964705882352941,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:422, total:425"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:31:13
score_json:
{
  "run_id": "e543d1e5-d4ff-4a18-ab54-ecb78c0ad6fa",
  "timestamp": "2023-03-07T16:31:13Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_solr-9.0.0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.047273931586875,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982847341337908,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:581, total:583"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.8717221994904816,
          "max_score": 10,
          "description": "135/583 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/583 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965694682675815,
          "max_score": 10,
          "description": "581/583 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:31:11.572774Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.88507718696398,
          "max_score": 10,
          "description": "65/583 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 587 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.3499142367066894,
          "max_score": 10,
          "description": "137/583 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.890222984562607,
          "max_score": 10,
          "description": "123/583 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:56:46
score_json:
{
  "run_id": "353721ad-6ba1-4333-9ec0-2df79c9f113c",
  "timestamp": "2023-03-07T16:56:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.1-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.237011637572735,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4812 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.891936824605153,
          "max_score": 10,
          "description": "4760/4812 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972984206151288,
          "max_score": 10,
          "description": "13/4812 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:56:37+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9989609310058185,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4811, total:4812"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4812 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.99168744804655,
          "max_score": 10,
          "description": "4/4812 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4812 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.884663341645885,
          "max_score": 10,
          "description": "4757/4812 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:56:50
score_json:
{
  "run_id": "5d3bc7e2-dff4-48d8-a159-729acd25c911",
  "timestamp": "2023-03-07T16:56:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.1-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.9863419194017435,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.997922725384296,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4812, total:4814"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.880556709597009,
          "max_score": 10,
          "description": "4757/4814 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4814/4814 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4814 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972995429995846,
          "max_score": 10,
          "description": "13/4814 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:56:48.240515Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991690901537183,
          "max_score": 10,
          "description": "4/4814 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4814/4814 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.995845450768591,
          "max_score": 10,
          "description": "4812/4814 have versions"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.887827170751974,
          "max_score": 10,
          "description": "4760/4814 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:56:54
score_json:
{
  "run_id": "e0d46e18-389d-483e-98b6-8703cb665009",
  "timestamp": "2023-03-07T16:56:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.1-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.986341919401745,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.995845450768591,
          "max_score": 10,
          "description": "4812/4814 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4814 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.880556709597009,
          "max_score": 10,
          "description": "4757/4814 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.997922725384296,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4812, total:4814"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4814/4814 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991690901537183,
          "max_score": 10,
          "description": "4/4814 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4814/4814 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:56:52.454205Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.887827170751974,
          "max_score": 10,
          "description": "4760/4814 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972995429995846,
          "max_score": 10,
          "description": "13/4814 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:57:12
score_json:
{
  "run_id": "d4e24990-80d1-4c84-94ac-dd55119d389d",
  "timestamp": "2023-03-07T16:57:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mageia-7.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.36839430894309,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.979674796747967,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:245, total:246"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "246/246 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.2195121951219512,
          "max_score": 10,
          "description": "216/246 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "246/246 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.959349593495935,
          "max_score": 10,
          "description": "245/246 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/246 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959349593495935,
          "max_score": 10,
          "description": "245/246 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:57:10+00:00"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/246 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "246/246 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 246 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/246 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.25,
          "max_score": 10,
          "description": "32/246 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:57:15
score_json:
{
  "run_id": "e797f82c-ec77-49f5-9254-91f88d6f8c44",
  "timestamp": "2023-03-07T16:57:15Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mageia-7.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112399193548387,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.879032258064516,
          "max_score": 10,
          "description": "245/248 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/248 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:57:14.536098Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959677419354839,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:246, total:248"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/248 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.879032258064516,
          "max_score": 10,
          "description": "245/248 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 248 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.2399193548387097,
          "max_score": 10,
          "description": "32/248 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.2903225806451613,
          "max_score": 10,
          "description": "216/248 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:57:18
score_json:
{
  "run_id": "9cf91f88-46ad-4e16-aff9-ee8b9779d092",
  "timestamp": "2023-03-07T16:57:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mageia-7.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112399193548387,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:57:17.472407Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.2903225806451613,
          "max_score": 10,
          "description": "216/248 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.879032258064516,
          "max_score": 10,
          "description": "245/248 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.2399193548387097,
          "max_score": 10,
          "description": "32/248 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959677419354839,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:246, total:248"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/248 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/248 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 248 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.879032258064516,
          "max_score": 10,
          "description": "245/248 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:57:20
score_json:
{
  "run_id": "12194d80-36d0-4e08-bc20-c44b9989bb3d",
  "timestamp": "2023-03-07T16:57:20Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_pypy-3.9-slim-buster.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.499403594771242,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.138071895424836,
          "max_score": 10,
          "description": "81/100 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.299999999999999,
          "max_score": 10,
          "description": "83/100 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.95,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:99, total:100"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 100 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:57:19+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.7,
          "max_score": 10,
          "description": "73/100 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "100/100 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.8999999999999995,
          "max_score": 10,
          "description": "31/100 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:57:22
score_json:
{
  "run_id": "6311e67e-cb81-4eed-be4c-4676dd408854",
  "timestamp": "2023-03-07T16:57:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_pypy-3.9-slim-buster.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.227230774159841,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:57:22.226132Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.9411764705882355,
          "max_score": 10,
          "description": "72/102 components have deprecated licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.862745098039216,
          "max_score": 10,
          "description": "32/102 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 102 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.137254901960784,
          "max_score": 10,
          "description": "83/102 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.897556659667385,
          "max_score": 10,
          "description": "80/102 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/102 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.901960784313725,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:100, total:102"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.80392156862745,
          "max_score": 10,
          "description": "100/102 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 16:59:26
score_json:
{
  "run_id": "370406f4-9d69-4c53-a886-8f910cda518c",
  "timestamp": "2023-03-07T16:59:26Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_java-openjdk-8u111-jre-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.451388888888888,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.222222222222222,
          "max_score": 10,
          "description": "10/36 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.444444444444445,
          "max_score": 10,
          "description": "34/36 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.861111111111111,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:35, total:36"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/36 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.111111111111112,
          "max_score": 10,
          "description": "14/36 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/36 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "36/36 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.722222222222221,
          "max_score": 10,
          "description": "35/36 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.666666666666667,
          "max_score": 10,
          "description": "24/36 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "36/36 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T16:59:25.810868Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/36 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 36 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:01:31
score_json:
{
  "run_id": "8870de2a-7f36-463d-a6ef-611a630f896d",
  "timestamp": "2023-03-07T17:01:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchbase-7.1.3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.24555709537656,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have checksums"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959016393442623,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:121, total:122"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 122 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.918032786885245,
          "max_score": 10,
          "description": "121/122 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:01:30.25898Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.213114754098361,
          "max_score": 10,
          "description": "34/122 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.3770491803278686,
          "max_score": 10,
          "description": "93/122 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/122 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.278688524590164,
          "max_score": 10,
          "description": "101/122 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.165240268186961,
          "max_score": 10,
          "description": "100/122 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:03:39
score_json:
{
  "run_id": "284827d3-1e1a-45d8-b40c-e49627245b27",
  "timestamp": "2023-03-07T17:03:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redis-6.2.11.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.460514638044385,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.210292760887724,
          "max_score": 10,
          "description": "85/100 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:98, total:100"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1,
          "max_score": 10,
          "description": "79/100 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:03:37+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "100/100 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9,
          "max_score": 10,
          "description": "99/100 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 100 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.5,
          "max_score": 10,
          "description": "85/100 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.6000000000000005,
          "max_score": 10,
          "description": "34/100 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:05:44
score_json:
{
  "run_id": "bc04a25e-bd9c-492d-a0cd-02f3ccecf268",
  "timestamp": "2023-03-07T17:05:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redis-6.2.11.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.2033529038774065,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.900990099009901,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:99, total:101"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.136365008241212,
          "max_score": 10,
          "description": "85/101 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.801980198019802,
          "max_score": 10,
          "description": "99/101 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:05:43.295419Z"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.415841584158416,
          "max_score": 10,
          "description": "85/101 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/101 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1782178217821784,
          "max_score": 10,
          "description": "79/101 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.633663366336634,
          "max_score": 10,
          "description": "34/101 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:09:51
score_json:
{
  "run_id": "cfbadaec-3391-4dc9-bae3-9fd62c659dc4",
  "timestamp": "2023-03-07T17:09:51Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_golang-alpine3.17.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.958333333333334,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/18 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.444444444444445,
          "max_score": 10,
          "description": "17/18 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "18/18 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 18 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.555555555555555,
          "max_score": 10,
          "description": "8/18 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.722222222222222,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:17, total:18"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/18 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "18/18 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.444444444444445,
          "max_score": 10,
          "description": "17/18 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "18/18 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "18/18 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:09:50+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/18 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:11:56
score_json:
{
  "run_id": "f32fa35c-8085-4658-8422-70ba2937ed44",
  "timestamp": "2023-03-07T17:11:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_golang-alpine3.17.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.575,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9,
          "max_score": 10,
          "description": "18/20 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "20/20 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.5,
          "max_score": 10,
          "description": "17/20 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/20 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "20/20 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.5,
          "max_score": 10,
          "description": "17/20 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/20 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:18, total:20"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/20 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/20 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 20 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:11:55.874764Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6,
          "max_score": 10,
          "description": "8/20 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:14:02
score_json:
{
  "run_id": "078f80c4-b092-4ef8-9fce-b791fa3cd260",
  "timestamp": "2023-03-07T17:14:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-18.04-scm.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.164959660509195,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.427848180944156,
          "max_score": 10,
          "description": "140/171 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/171 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/171 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.081871345029239,
          "max_score": 10,
          "description": "67/171 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.5146198830409356,
          "max_score": 10,
          "description": "128/171 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970760233918129,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:170, total:171"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/171 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 171 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:14:00.699432Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.362573099415204,
          "max_score": 10,
          "description": "143/171 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "171/171 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.941520467836257,
          "max_score": 10,
          "description": "170/171 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "171/171 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:16:33
score_json:
{
  "run_id": "b8b04a64-ebf1-4d93-8866-087334453442",
  "timestamp": "2023-03-07T17:16:33Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_golang-buster.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.161609826391773,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "203/203 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.901477832512315,
          "max_score": 10,
          "description": "201/203 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:16:31.039897Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/203 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/203 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.551724137931034,
          "max_score": 10,
          "description": "70/203 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.300492610837438,
          "max_score": 10,
          "description": "136/203 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "203/203 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.586206896551724,
          "max_score": 10,
          "description": "154/203 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9507389162561575,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:201, total:203"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/203 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 203 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.941556133746802,
          "max_score": 10,
          "description": "150/203 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:18:39
score_json:
{
  "run_id": "4a26ed72-a824-4dc8-8c11-ab63c05a6705",
  "timestamp": "2023-03-07T17:18:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_notary-server-0.6.1-2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.966666666666666,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "15/15 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "15/15 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 15 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:18:38+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.333333333333334,
          "max_score": 10,
          "description": "14/15 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.333333333333334,
          "max_score": 10,
          "description": "14/15 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/15 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "15/15 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/15 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.666666666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:14, total:15"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/15 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "15/15 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6,
          "max_score": 10,
          "description": "6/15 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:20:44
score_json:
{
  "run_id": "42f08aef-47fc-4d97-b344-8d717b63d3f5",
  "timestamp": "2023-03-07T17:20:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_notary-server-0.6.1-2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.640625,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.25,
          "max_score": 10,
          "description": "6/16 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/16 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/16 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:20:43.400272Z"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 16 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.6875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:15, total:16"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:22:50
score_json:
{
  "run_id": "8f4f5058-91ff-4075-81c6-520948b019b5",
  "timestamp": "2023-03-07T17:22:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_tomcat-9.0-jdk17-corretto-al2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1241100735710265,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.870967741935484,
          "max_score": 10,
          "description": "153/155 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/155 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.741935483870968,
          "max_score": 10,
          "description": "97/155 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "155/155 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 156 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:22:48.261249Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4499434069043575,
          "max_score": 10,
          "description": "29/155 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/155 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.935483870967742,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:153, total:155"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/155 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/155 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "155/155 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.483870967741936,
          "max_score": 10,
          "description": "116/155 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:37:47
score_json:
{
  "run_id": "fc9806d5-2667-4674-8bb3-b20f3e1e5aa0",
  "timestamp": "2023-03-07T17:37:47Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchbase-community-6.6.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.523773148148149,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "120/120 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "120/120 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.183796296296297,
          "max_score": 10,
          "description": "97/120 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.416666666666667,
          "max_score": 10,
          "description": "31/120 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.166666666666666,
          "max_score": 10,
          "description": "98/120 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/120 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.75,
          "max_score": 10,
          "description": "87/120 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958333333333334,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:119, total:120"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/120 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:37:45+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "120/120 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "120/120 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 120 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:37:50
score_json:
{
  "run_id": "0462e244-b2f8-4a07-9665-a22a64acec6d",
  "timestamp": "2023-03-07T17:37:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchbase-community-6.6.0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.2588289897716125,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.0618256970715985,
          "max_score": 10,
          "description": "97/122 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.032786885245901,
          "max_score": 10,
          "description": "98/122 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.918032786885246,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:120, total:122"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.4590163934426235,
          "max_score": 10,
          "description": "31/122 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:37:49.727895Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8688524590163933,
          "max_score": 10,
          "description": "87/122 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/122 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.836065573770492,
          "max_score": 10,
          "description": "120/122 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 122 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:37:52
score_json:
{
  "run_id": "a26cad8e-c0ab-4195-91ef-bcaff1597371",
  "timestamp": "2023-03-07T17:37:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchbase-community-6.6.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.254730629115874,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.836065573770492,
          "max_score": 10,
          "description": "120/122 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 122 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.9508196721311473,
          "max_score": 10,
          "description": "86/122 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.032786885245901,
          "max_score": 10,
          "description": "98/122 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.3770491803278695,
          "max_score": 10,
          "description": "32/122 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.9798584839568445,
          "max_score": 10,
          "description": "96/122 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/122 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:37:52.315374Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.918032786885246,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:120, total:122"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:37:56
score_json:
{
  "run_id": "fe0881c5-12e9-4bef-a135-47eec398801a",
  "timestamp": "2023-03-07T17:37:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_neurodebian-jammy.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.416999385505538,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:37:55+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.139987710110739,
          "max_score": 10,
          "description": "111/125 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.76,
          "max_score": 10,
          "description": "53/125 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.52,
          "max_score": 10,
          "description": "106/125 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:124, total:125"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "125/125 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 125 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.96,
          "max_score": 10,
          "description": "112/125 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:42:02
score_json:
{
  "run_id": "8676005a-e238-490f-8310-d1928adafe7b",
  "timestamp": "2023-03-07T17:42:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redis-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.460514638044385,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.6000000000000005,
          "max_score": 10,
          "description": "34/100 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.5,
          "max_score": 10,
          "description": "85/100 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:42:02+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1,
          "max_score": 10,
          "description": "79/100 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 100 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:98, total:100"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "100/100 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9,
          "max_score": 10,
          "description": "99/100 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.210292760887724,
          "max_score": 10,
          "description": "85/100 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:44:08
score_json:
{
  "run_id": "e0bbb6b5-2c18-43e3-876d-b961767a29e8",
  "timestamp": "2023-03-07T17:44:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redis-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.2033529038774065,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:44:07.325877Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.415841584158416,
          "max_score": 10,
          "description": "85/101 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1782178217821784,
          "max_score": 10,
          "description": "79/101 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/101 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.633663366336634,
          "max_score": 10,
          "description": "34/101 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.801980198019802,
          "max_score": 10,
          "description": "99/101 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.136365008241212,
          "max_score": 10,
          "description": "85/101 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.900990099009901,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:99, total:101"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:50:19
score_json:
{
  "run_id": "5a7ee1eb-f511-4b39-91c6-64feb5d377e3",
  "timestamp": "2023-03-07T17:50:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_oraclelinux-8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.156586021505378,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.89247311827957,
          "max_score": 10,
          "description": "184/186 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/186 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.946236559139784,
          "max_score": 10,
          "description": "185/186 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 186 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/186 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.973118279569892,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:185, total:186"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/186 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "186/186 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "186/186 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:50:17.216463Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/186 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.706989247311828,
          "max_score": 10,
          "description": "40/186 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.6129032258064515,
          "max_score": 10,
          "description": "156/186 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:50:22
score_json:
{
  "run_id": "a7ee317e-f4a3-47c9-ad3c-f3d585dcd70d",
  "timestamp": "2023-03-07T17:50:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_oraclelinux-8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.156586021505376,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 186 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.89247311827957,
          "max_score": 10,
          "description": "184/186 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/186 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "186/186 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "186/186 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/186 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.946236559139784,
          "max_score": 10,
          "description": "185/186 have versions"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/186 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.706989247311828,
          "max_score": 10,
          "description": "40/186 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.973118279569892,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:185, total:186"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.6129032258064515,
          "max_score": 10,
          "description": "156/186 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:50:21.458443Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/186 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:51:50
score_json:
{
  "run_id": "939f856d-0f50-4014-aa6d-024f4663a0cd",
  "timestamp": "2023-03-07T17:51:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_swarm-1.2.4.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:51:49.924128Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 17:53:56
score_json:
{
  "run_id": "8fe78816-8675-4c89-a1fb-20a302aad456",
  "timestamp": "2023-03-07T17:53:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_owncloud-9.1.8-fpm.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.094344580888267,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/260 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.269230769230769,
          "max_score": 10,
          "description": "123/260 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.903846153846153,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:255, total:260"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "260/260 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/260 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "260/260 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 266 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T17:53:54.74763Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.346153846153846,
          "max_score": 10,
          "description": "139/260 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/260 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.807692307692307,
          "max_score": 10,
          "description": "255/260 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.021507002380748,
          "max_score": 10,
          "description": "134/260 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.538461538461538,
          "max_score": 10,
          "description": "64/260 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:11:39
score_json:
{
  "run_id": "bb0a2ad8-d9b0-4a08-a7de-1551f30f9578",
  "timestamp": "2023-03-07T18:11:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_logstash-8.5.3.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.36218498607641,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.228682170542635,
          "max_score": 10,
          "description": "143/516 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/516 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.941860465116278,
          "max_score": 10,
          "description": "513/516 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "516/516 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/516 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.908428403698747,
          "max_score": 10,
          "description": "273/516 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.151162790697675,
          "max_score": 10,
          "description": "369/516 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.042635658914728,
          "max_score": 10,
          "description": "101/516 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:11:36.775557Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970930232558139,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:513, total:516"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/516 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "516/516 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 520 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:11:54
score_json:
{
  "run_id": "e923b641-7f93-40f0-9296-b50bf043989a",
  "timestamp": "2023-03-07T18:11:53Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.0-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.237011637572735,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.884663341645885,
          "max_score": 10,
          "description": "4757/4812 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9989609310058185,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4811, total:4812"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4812 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972984206151288,
          "max_score": 10,
          "description": "13/4812 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4812 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.891936824605153,
          "max_score": 10,
          "description": "4760/4812 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4812 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4812/4812 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.99168744804655,
          "max_score": 10,
          "description": "4/4812 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:11:45+00:00"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:11:58
score_json:
{
  "run_id": "545d2244-cdbc-46b0-bbcf-b0ad3e70d78e",
  "timestamp": "2023-03-07T18:11:58Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.0-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.9863419194017435,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.997922725384296,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4812, total:4814"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.995845450768591,
          "max_score": 10,
          "description": "4812/4814 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:11:56.571469Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.880556709597009,
          "max_score": 10,
          "description": "4757/4814 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4814/4814 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4814/4814 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.887827170751974,
          "max_score": 10,
          "description": "4760/4814 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972995429995846,
          "max_score": 10,
          "description": "13/4814 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/4814 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991690901537183,
          "max_score": 10,
          "description": "4/4814 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4814 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:12:01
score_json:
{
  "run_id": "92f82ff0-0f43-4a55-91d5-84a61c678227",
  "timestamp": "2023-03-07T18:12:01Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_lightstreamer-7.3.3-jdk8.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.361314324087035,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "232/232 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.273700274844148,
          "max_score": 10,
          "description": "123/232 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.978448275862069,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:231, total:232"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "232/232 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "232/232 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/232 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 232 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.172413793103448,
          "max_score": 10,
          "description": "112/232 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.413793103448276,
          "max_score": 10,
          "description": "60/232 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:12:01+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.387931034482759,
          "max_score": 10,
          "description": "125/232 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/232 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "232/232 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:12:04
score_json:
{
  "run_id": "12dedef6-1641-4c4b-bf1e-ac560c59c0df",
  "timestamp": "2023-03-07T18:12:04Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_lightstreamer-7.3.3-jdk8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.104966250749451,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/234 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.914529914529915,
          "max_score": 10,
          "description": "232/234 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "234/234 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/234 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.435897435897436,
          "max_score": 10,
          "description": "60/234 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:12:04.035888Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.3418803418803416,
          "max_score": 10,
          "description": "125/234 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.2360771517411635,
          "max_score": 10,
          "description": "123/234 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957264957264957,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:232, total:234"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "234/234 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 234 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/234 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.213675213675214,
          "max_score": 10,
          "description": "112/234 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:12:07
score_json:
{
  "run_id": "a976455c-3913-42b2-814c-bc5f7cbffaaa",
  "timestamp": "2023-03-07T18:12:07Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.15.7.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.640625,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.6875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:15, total:16"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:12:06.821932Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/16 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 16 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.25,
          "max_score": 10,
          "description": "6/16 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/16 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:14:13
score_json:
{
  "run_id": "9103995e-f69a-4a7d-97f4-061d51cc2a53",
  "timestamp": "2023-03-07T18:14:13Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_thrift-0.12.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.21588319088319,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "93/93 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.043010752688172,
          "max_score": 10,
          "description": "74/93 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/93 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "93/93 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.167126183255215,
          "max_score": 10,
          "description": "76/93 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.096774193548388,
          "max_score": 10,
          "description": "27/93 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.89247311827957,
          "max_score": 10,
          "description": "92/93 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:14:11.641314Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/93 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 93 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.172043010752688,
          "max_score": 10,
          "description": "76/93 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/93 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.946236559139785,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:92, total:93"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:16:21
score_json:
{
  "run_id": "7cd726ff-f027-420a-8747-626bad3bb578",
  "timestamp": "2023-03-07T18:16:21Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_neurodebian-jammy-non-free.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.4169993855055365,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 125 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.96,
          "max_score": 10,
          "description": "112/125 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.139987710110739,
          "max_score": 10,
          "description": "111/125 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.52,
          "max_score": 10,
          "description": "106/125 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:124, total:125"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.76,
          "max_score": 10,
          "description": "53/125 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:16:19+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "125/125 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:18:29
score_json:
{
  "run_id": "221760ec-2329-4d19-b695-df7ac36a392d",
  "timestamp": "2023-03-07T18:18:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_neurodebian-jammy-non-free.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.161603989487077,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:18:28.00185Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9603174603174605,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:125, total:126"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.793650793650794,
          "max_score": 10,
          "description": "53/126 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "126/126 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "126/126 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "112/126 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.5873015873015872,
          "max_score": 10,
          "description": "106/126 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/126 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.920634920634921,
          "max_score": 10,
          "description": "125/126 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/126 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 126 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.081286138947875,
          "max_score": 10,
          "description": "111/126 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/126 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:20:35
score_json:
{
  "run_id": "ec6172ba-45e9-494e-a7a7-28a25e96a415",
  "timestamp": "2023-03-07T18:20:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_oraclelinux-8-slim.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.423878205128204,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/104 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.903846153846153,
          "max_score": 10,
          "description": "103/104 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "104/104 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "104/104 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:20:34+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.7307692307692308,
          "max_score": 10,
          "description": "86/104 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 104 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.891025641025641,
          "max_score": 10,
          "description": "26/104 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/104 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/104 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "104/104 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.951923076923077,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:103, total:104"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "104/104 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:22:41
score_json:
{
  "run_id": "ed7f7879-312d-41fe-8307-67e6860882a6",
  "timestamp": "2023-03-07T18:22:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_oraclelinux-8-slim.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.167460317460318,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.904761904761905,
          "max_score": 10,
          "description": "104/105 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 105 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.8095238095238095,
          "max_score": 10,
          "description": "86/105 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9523809523809526,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:104, total:105"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "105/105 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:22:39.871579Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.809523809523808,
          "max_score": 10,
          "description": "103/105 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/105 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/105 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/105 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "105/105 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.873015873015873,
          "max_score": 10,
          "description": "26/105 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/105 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:38:49
score_json:
{
  "run_id": "6d2e5d0f-7814-47c0-8b20-42bb0401ed06",
  "timestamp": "2023-03-07T18:38:49Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mysql-8.0-debian.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.396924247353917,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.929078014184396,
          "max_score": 10,
          "description": "140/141 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:38:47+00:00"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/141 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "141/141 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.929078014184397,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:139, total:141"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/141 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1985815602836882,
          "max_score": 10,
          "description": "110/141 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "141/141 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "141/141 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.886524822695035,
          "max_score": 10,
          "description": "58/141 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 141 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.368794326241135,
          "max_score": 10,
          "description": "118/141 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.626428209489702,
          "max_score": 10,
          "description": "118/141 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:38:54
score_json:
{
  "run_id": "bf5eb106-9b65-4637-b9bd-f93901fd7efc",
  "timestamp": "2023-03-07T18:38:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.4497418500071175,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "849/849 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "849/849 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.244994110718492,
          "max_score": 10,
          "description": "700/849 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/849 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 849 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:38:52+00:00"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.394581861012956,
          "max_score": 10,
          "description": "391/849 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/849 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "849/849 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.932410616161198,
          "max_score": 10,
          "description": "686/849 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.428739693757361,
          "max_score": 10,
          "description": "473/849 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.994110718492344,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:848, total:849"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "849/849 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:38:57
score_json:
{
  "run_id": "489ebdd4-d2cb-4b65-b0ce-62f82a649d8d",
  "timestamp": "2023-03-07T18:38:57Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.197987251752207,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9941176470588236,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:849, total:850"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "850/850 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.906803858573551,
          "max_score": 10,
          "description": "686/850 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.435294117647059,
          "max_score": 10,
          "description": "473/850 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/850 have supplier names"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:38:56.630729Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/850 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/850 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.4,
          "max_score": 10,
          "description": "391/850 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "850/850 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.988235294117647,
          "max_score": 10,
          "description": "849/850 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 850 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.235294117647058,
          "max_score": 10,
          "description": "700/850 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:39:00
score_json:
{
  "run_id": "629ac15f-ce78-4660-8417-03504fa92b03",
  "timestamp": "2023-03-07T18:39:00Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.19739901645809,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/850 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.235294117647058,
          "max_score": 10,
          "description": "700/850 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/850 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.895039152691198,
          "max_score": 10,
          "description": "685/850 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.988235294117647,
          "max_score": 10,
          "description": "849/850 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "850/850 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 850 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9941176470588236,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:849, total:850"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.3882352941176475,
          "max_score": 10,
          "description": "392/850 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:38:59.975204Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.447058823529412,
          "max_score": 10,
          "description": "472/850 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/850 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "850/850 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:39:03
score_json:
{
  "run_id": "57f122cf-a188-4bbd-b1c5-727112565cf3",
  "timestamp": "2023-03-07T18:39:03Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redis-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.460514638044385,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "100/100 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.210292760887724,
          "max_score": 10,
          "description": "85/100 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:98, total:100"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 100 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.6000000000000005,
          "max_score": 10,
          "description": "34/100 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.5,
          "max_score": 10,
          "description": "85/100 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/100 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9,
          "max_score": 10,
          "description": "99/100 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:39:03+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1,
          "max_score": 10,
          "description": "79/100 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "100/100 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:41:09
score_json:
{
  "run_id": "5b116144-1f09-4312-82db-ad398ee67100",
  "timestamp": "2023-03-07T18:41:09Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redis-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.203352903877407,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.801980198019802,
          "max_score": 10,
          "description": "99/101 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.415841584158416,
          "max_score": 10,
          "description": "85/101 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1782178217821784,
          "max_score": 10,
          "description": "79/101 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.900990099009901,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:99, total:101"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/101 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.633663366336634,
          "max_score": 10,
          "description": "34/101 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.136365008241212,
          "max_score": 10,
          "description": "85/101 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:41:07.959457Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:45:48
score_json:
{
  "run_id": "8bd25f37-bcce-410c-9a12-bcf5fec9c379",
  "timestamp": "2023-03-07T18:45:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.2.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1347101751595705,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:45:46.590304Z"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8827838827838828,
          "max_score": 10,
          "description": "167/273 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981684981684982,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:272, total:273"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/273 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.336996336996337,
          "max_score": 10,
          "description": "100/273 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.142857142857143,
          "max_score": 10,
          "description": "195/273 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.386511195499102,
          "max_score": 10,
          "description": "189/273 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.963369963369964,
          "max_score": 10,
          "description": "272/273 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 273 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:47:56
score_json:
{
  "run_id": "086e4df3-8086-4ddd-b7fa-a1a0fb236759",
  "timestamp": "2023-03-07T18:47:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.512328075242834,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/437 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:47:53+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.826086956521739,
          "max_score": 10,
          "description": "95/437 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988558352402746,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:436, total:437"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 437 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.508009153318078,
          "max_score": 10,
          "description": "240/437 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.807202237122143,
          "max_score": 10,
          "description": "302/437 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.116704805491992,
          "max_score": 10,
          "description": "311/437 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/437 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "437/437 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:47:59
score_json:
{
  "run_id": "6dcee87d-a62f-4311-a457-dc098e6dd482",
  "timestamp": "2023-03-07T18:47:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.258227170513616,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.835990888382688,
          "max_score": 10,
          "description": "95/439 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.954441913439636,
          "max_score": 10,
          "description": "437/439 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:47:58.559849Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.779577578837259,
          "max_score": 10,
          "description": "302/439 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/439 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977220956719818,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:437, total:439"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 439 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.084282460136674,
          "max_score": 10,
          "description": "311/439 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.533029612756264,
          "max_score": 10,
          "description": "240/439 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 18:50:06
score_json:
{
  "run_id": "bbaddde0-2a86-43ee-a894-870a8f5846e8",
  "timestamp": "2023-03-07T18:50:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_percona-8.0.29-21-centos.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.403689567430026,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/262 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.680661577608142,
          "max_score": 10,
          "description": "57/262 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.961832061068703,
          "max_score": 10,
          "description": "1/262 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "262/262 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.980916030534352,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:261, total:262"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "262/262 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "262/262 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 262 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T18:50:04+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.4885496183206106,
          "max_score": 10,
          "description": "223/262 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "262/262 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.961832061068703,
          "max_score": 10,
          "description": "261/262 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/262 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:00:30
score_json:
{
  "run_id": "a226ebba-9c6b-4e5e-93e1-4b450ac16e3f",
  "timestamp": "2023-03-07T19:00:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_wordpress-beta-6-php8.0-fpm-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.02749140893471,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/97 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 97 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.79381443298969,
          "max_score": 10,
          "description": "95/97 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.907216494845361,
          "max_score": 10,
          "description": "30/97 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.484536082474227,
          "max_score": 10,
          "description": "5/97 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:00:29+00:00"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "97/97 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/97 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.415807560137456,
          "max_score": 10,
          "description": "92/97 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.948453608247423,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:96, total:97"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "97/97 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:00:34
score_json:
{
  "run_id": "ca3a1a5d-c1cb-4980-a3e1-ea520088f946",
  "timestamp": "2023-03-07T19:00:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_wordpress-beta-6-php8.0-fpm-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.749158249158247,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.969696969696971,
          "max_score": 10,
          "description": "30/99 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/99 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 99 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/99 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.898989898989899,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:97, total:99"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.595959595959595,
          "max_score": 10,
          "description": "95/99 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:00:33.39281Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "99/99 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.797979797979798,
          "max_score": 10,
          "description": "97/99 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "99/99 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.225589225589225,
          "max_score": 10,
          "description": "92/99 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/99 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.494949494949495,
          "max_score": 10,
          "description": "5/99 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


