# scores

updated_at: 2023-03-07 05:18:12
score_json:
{
  "run_id": "9b604f16-2965-4e01-bb63-b635ad68644a",
  "timestamp": "2023-03-07T05:18:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_docker-cli.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.056397306397305,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.94949494949495,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:294, total:297"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.8989898989899,
          "max_score": 10,
          "description": "294/297 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "297/297 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:18:10.557788Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 297 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0.7744107744107744,
          "max_score": 10,
          "description": "23/297 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/297 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/297 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/297 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0.7744107744107743,
          "max_score": 10,
          "description": "23/297 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.73063973063973,
          "max_score": 10,
          "description": "8/297 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "297/297 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/297 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:20:16
score_json:
{
  "run_id": "58e2bee2-2987-4d7e-80ce-30c30b0d448b",
  "timestamp": "2023-03-07T05:20:16Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rethinkdb-2.4-bullseye-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.188338530272167,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.955882352941177,
          "max_score": 10,
          "description": "55/136 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/136 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "136/136 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/136 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.038829428972785,
          "max_score": 10,
          "description": "118/136 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1323529411764706,
          "max_score": 10,
          "description": "107/136 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 136 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:20:16.144011Z"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.926470588235293,
          "max_score": 10,
          "description": "135/136 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.963235294117647,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:135, total:136"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "136/136 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "119/136 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/136 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:22:22
score_json:
{
  "run_id": "939820c2-88a4-42d6-870f-9b896835f6ae",
  "timestamp": "2023-03-07T05:22:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_celery-4.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.55040650406504,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/123 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.349593495934959,
          "max_score": 10,
          "description": "100/123 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.723577235772358,
          "max_score": 10,
          "description": "28/123 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:22:20+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.292682926829269,
          "max_score": 10,
          "description": "102/123 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959349593495935,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:122, total:123"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "123/123 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "123/123 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 123 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.682926829268293,
          "max_score": 10,
          "description": "90/123 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "123/123 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "123/123 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/123 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:22:25
score_json:
{
  "run_id": "43af6085-9102-4b4f-9dfc-d9a647e198d0",
  "timestamp": "2023-03-07T05:22:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_celery-4.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.285497435897436,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/125 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8000000000000003,
          "max_score": 10,
          "description": "90/125 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 125 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:22:24.640736Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.2299487179487185,
          "max_score": 10,
          "description": "100/125 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.76,
          "max_score": 10,
          "description": "28/125 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.16,
          "max_score": 10,
          "description": "102/125 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.84,
          "max_score": 10,
          "description": "123/125 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.92,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:123, total:125"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:24:29
score_json:
{
  "run_id": "09a770d2-c41f-4cdd-9793-5b64e758bce7",
  "timestamp": "2023-03-07T05:24:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_java-8u111-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.439189189189189,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 37 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.45945945945946,
          "max_score": 10,
          "description": "35/37 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.486486486486487,
          "max_score": 10,
          "description": "24/37 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.72972972972973,
          "max_score": 10,
          "description": "36/37 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/37 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.027027027027027,
          "max_score": 10,
          "description": "11/37 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:24:28.477432Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.216216216216216,
          "max_score": 10,
          "description": "14/37 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.864864864864865,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:36, total:37"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:26:34
score_json:
{
  "run_id": "466bc6f0-18b1-4253-a031-145b3fc62c72",
  "timestamp": "2023-03-07T05:26:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchbase-community-7.1.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.249655456032299,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.918032786885245,
          "max_score": 10,
          "description": "121/122 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.278688524590164,
          "max_score": 10,
          "description": "101/122 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 122 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.247207481301715,
          "max_score": 10,
          "description": "101/122 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.2950819672131146,
          "max_score": 10,
          "description": "94/122 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:26:33.036584Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959016393442623,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:121, total:122"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/122 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.295081967213115,
          "max_score": 10,
          "description": "33/122 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:28:39
score_json:
{
  "run_id": "4458717b-cb94-4616-a025-b210c6156416",
  "timestamp": "2023-03-07T05:28:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.5.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.295081607158236,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "580/580 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "580/580 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.5137011086819854,
          "max_score": 10,
          "description": "105/580 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:28:38+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/580 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "580/580 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/580 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "580/580 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 580 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991379310344827,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:579, total:580"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.206896551724137,
          "max_score": 10,
          "description": "46/580 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8275862068965518,
          "max_score": 10,
          "description": "106/580 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.36206896551724,
          "max_score": 10,
          "description": "95/580 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:30:44
score_json:
{
  "run_id": "3655283c-9005-4348-bd51-997fb49b9458",
  "timestamp": "2023-03-07T05:30:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_docker-23.0.1-dind.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.12550505050505,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.696969696969697,
          "max_score": 10,
          "description": "56/330 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/330 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 330 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.333333333333334,
          "max_score": 10,
          "description": "22/330 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.954545454545455,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:327, total:330"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.6767676767676765,
          "max_score": 10,
          "description": "56/330 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:30:42.889245Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/330 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.90909090909091,
          "max_score": 10,
          "description": "327/330 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "330/330 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "330/330 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/330 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.93939393939394,
          "max_score": 10,
          "description": "2/330 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:32:50
score_json:
{
  "run_id": "9e845eac-8afd-433b-bc17-9ce443750881",
  "timestamp": "2023-03-07T05:32:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_redmine-5.0.4-alpine3.16.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.864864864864865,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.547297297297296,
          "max_score": 10,
          "description": "43/296 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.695945945945946,
          "max_score": 10,
          "description": "9/296 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/296 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/296 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.476351351351349,
          "max_score": 10,
          "description": "282/296 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "296/296 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.72972972972973,
          "max_score": 10,
          "description": "288/296 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.949324324324325,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:293, total:296"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "296/296 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 296 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/296 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.89864864864865,
          "max_score": 10,
          "description": "293/296 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:32:48.484857Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:34:55
score_json:
{
  "run_id": "871e3ca3-e477-481e-9506-794aa6259a38",
  "timestamp": "2023-03-07T05:34:55Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_postgres-15.2-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.918402777777779,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "43/48 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/48 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.833333333333334,
          "max_score": 10,
          "description": "20/48 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "48/48 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.166666666666666,
          "max_score": 10,
          "description": "4/48 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/48 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 48 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:34:54+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.895833333333333,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:47, total:48"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.583333333333334,
          "max_score": 10,
          "description": "46/48 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:37:01
score_json:
{
  "run_id": "b72ef68a-08a0-4434-b3c6-1d6d48b2b336",
  "timestamp": "2023-03-07T05:37:01Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haskell-9.2.7-buster.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371408739974916,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "416/416 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "416/416 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.177884615384616,
          "max_score": 10,
          "description": "159/416 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.204617107190637,
          "max_score": 10,
          "description": "285/416 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "416/416 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "416/416 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 416 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.211538461538462,
          "max_score": 10,
          "description": "300/416 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8461538461538463,
          "max_score": 10,
          "description": "256/416 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987980769230769,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:415, total:416"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/416 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:36:58+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/416 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:39:08
score_json:
{
  "run_id": "4cf21983-e8e2-43ed-82b3-e59f7fe5e3b2",
  "timestamp": "2023-03-07T05:39:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haskell-9.2.7-buster.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.119826317244853,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.190291332906655,
          "max_score": 10,
          "description": "285/417 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8609112709832134,
          "max_score": 10,
          "description": "256/417 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988009592326139,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:416, total:417"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:39:05.394623Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/417 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.976019184652278,
          "max_score": 10,
          "description": "416/417 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "417/417 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/417 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/417 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.187050359712231,
          "max_score": 10,
          "description": "159/417 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "417/417 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 417 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.194244604316546,
          "max_score": 10,
          "description": "300/417 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:41:19
score_json:
{
  "run_id": "418cb430-7e41-4674-b47e-2a6e97143654",
  "timestamp": "2023-03-07T05:41:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_aerospike-ce-6.2.0.3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.188670940761642,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.917355371900827,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:119, total:121"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:41:17.482614Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/121 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.583336170604737,
          "max_score": 10,
          "description": "97/121 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.6115702479338845,
          "max_score": 10,
          "description": "41/121 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.834710743801654,
          "max_score": 10,
          "description": "119/121 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "121/121 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.099173553719009,
          "max_score": 10,
          "description": "98/121 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.727272727272727,
          "max_score": 10,
          "description": "88/121 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/121 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/121 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "121/121 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 121 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:44:18
score_json:
{
  "run_id": "95b9f171-3e34-4451-948b-36de3878d4b6",
  "timestamp": "2023-03-07T05:44:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_sonarqube-enterprise.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.287826568653797,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "693/693 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 693 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.847041847041847,
          "max_score": 10,
          "description": "128/693 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "693/693 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "693/693 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/693 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.992784992784992,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:692, total:693"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/693 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4708170873616453,
          "max_score": 10,
          "description": "126/693 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "693/693 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:44:14+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.326118326118326,
          "max_score": 10,
          "description": "116/693 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.11976911976912,
          "max_score": 10,
          "description": "61/693 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:46:23
score_json:
{
  "run_id": "113cec61-8070-45d5-be73-4db4bce19fc7",
  "timestamp": "2023-03-07T05:46:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_sonarqube-enterprise.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.0359007072867055,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "695/695 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/695 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.971223021582734,
          "max_score": 10,
          "description": "693/695 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.841726618705036,
          "max_score": 10,
          "description": "128/695 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/695 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.985611510791367,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:693, total:695"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 695 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.466215584583036,
          "max_score": 10,
          "description": "126/695 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.33093525179856,
          "max_score": 10,
          "description": "116/695 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/695 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.122302158273381,
          "max_score": 10,
          "description": "61/695 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "695/695 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:46:22.098035Z"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:48:29
score_json:
{
  "run_id": "084ba9e1-e5e7-43e3-b05a-d654a51a64a6",
  "timestamp": "2023-03-07T05:48:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_swarm-1.2.8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:48:28.732434Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:50:52
score_json:
{
  "run_id": "42cc8ad7-f9df-4638-b0ba-ed8e805b7eab",
  "timestamp": "2023-03-07T05:50:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.1-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.402222222222223,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.2,
          "max_score": 10,
          "description": "72/225 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/225 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "225/225 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "25/225 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.844444444444445,
          "max_score": 10,
          "description": "26/225 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/225 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 225 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977777777777778,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:224, total:225"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:50:51+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1333333333333333,
          "max_score": 10,
          "description": "49/225 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:50:55
score_json:
{
  "run_id": "afe2ac08-91b7-4178-ad37-4ce057ddaa5c",
  "timestamp": "2023-03-07T05:50:55Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.1-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.145374449339206,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.911894273127754,
          "max_score": 10,
          "description": "225/227 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 243 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1145374449339207,
          "max_score": 10,
          "description": "49/227 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.854625550660792,
          "max_score": 10,
          "description": "26/227 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1718061674008813,
          "max_score": 10,
          "description": "72/227 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.955947136563877,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:227"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/227 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.898678414096917,
          "max_score": 10,
          "description": "25/227 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:50:54.554212Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:50:57
score_json:
{
  "run_id": "3bbdc8b1-1c66-4350-b2f0-ecba5585b7fd",
  "timestamp": "2023-03-07T05:50:57Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.1-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.145374449339206,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1145374449339207,
          "max_score": 10,
          "description": "49/227 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:50:56.789055Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.955947136563877,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:227"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 243 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1718061674008813,
          "max_score": 10,
          "description": "72/227 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.854625550660792,
          "max_score": 10,
          "description": "26/227 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.898678414096917,
          "max_score": 10,
          "description": "25/227 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.911894273127754,
          "max_score": 10,
          "description": "225/227 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/227 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:53:01
score_json:
{
  "run_id": "9cfe5f8a-7005-4fc2-9cd7-fe5eaa588b23",
  "timestamp": "2023-03-07T05:53:01Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.15.7.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.640625,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "16/16 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 16 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/16 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/16 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "14/16 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.25,
          "max_score": 10,
          "description": "6/16 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/16 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.375,
          "max_score": 10,
          "description": "15/16 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:53:00.486467Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.6875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:15, total:16"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:55:06
score_json:
{
  "run_id": "2019e38f-69ab-4f12-9e30-fa210f138f47",
  "timestamp": "2023-03-07T05:55:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_celery-3.1.24.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.267927700714585,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.6229508196721314,
          "max_score": 10,
          "description": "90/122 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.6229508196721305,
          "max_score": 10,
          "description": "29/122 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.1618327028163105,
          "max_score": 10,
          "description": "97/122 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:55:04.998382Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.196721311475411,
          "max_score": 10,
          "description": "100/122 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.836065573770492,
          "max_score": 10,
          "description": "120/122 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 122 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.918032786885246,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:120, total:122"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/122 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:55:09
score_json:
{
  "run_id": "bc2a619c-9951-4d0a-a095-06d83b9286e2",
  "timestamp": "2023-03-07T05:55:09Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kaazing-gateway-5.1.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.417118139628732,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/236 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.719481436642454,
          "max_score": 10,
          "description": "127/236 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.978813559322034,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:235, total:236"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.872881355932203,
          "max_score": 10,
          "description": "121/236 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "236/236 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.305084745762713,
          "max_score": 10,
          "description": "40/236 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "236/236 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "236/236 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.466101694915254,
          "max_score": 10,
          "description": "129/236 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "236/236 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 236 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:55:08+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/236 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:57:14
score_json:
{
  "run_id": "fb77bf59-fca2-4bf9-8977-fdb9ebb36d2d",
  "timestamp": "2023-03-07T05:57:14Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kaazing-gateway-5.1.1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.162454789608151,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/238 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.719684027457137,
          "max_score": 10,
          "description": "128/238 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.873949579831932,
          "max_score": 10,
          "description": "122/238 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.361344537815127,
          "max_score": 10,
          "description": "39/238 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/238 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.915966386554622,
          "max_score": 10,
          "description": "236/238 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "238/238 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 283 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.42016806722689,
          "max_score": 10,
          "description": "129/238 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957983193277311,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:236, total:238"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "238/238 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:57:12.949721Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/238 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:57:17
score_json:
{
  "run_id": "6f67708f-7775-4eba-aa14-6b6166d2e8b8",
  "timestamp": "2023-03-07T05:57:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_httpd-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.492667772353999,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 118 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.0143723962325355,
          "max_score": 10,
          "description": "98/118 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.88135593220339,
          "max_score": 10,
          "description": "84/118 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "118/118 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.64406779661017,
          "max_score": 10,
          "description": "102/118 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/118 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/118 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "118/118 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "118/118 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:57:16+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9576271186440675,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:117, total:118"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.3559322033898304,
          "max_score": 10,
          "description": "43/118 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "118/118 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 05:59:22
score_json:
{
  "run_id": "a3c472c7-6a94-4283-ad0a-f991a49da5b2",
  "timestamp": "2023-03-07T05:59:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_httpd-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.240520811974382,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.915966386554622,
          "max_score": 10,
          "description": "118/119 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 119 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T05:59:20.935314Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957983193277311,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:118, total:119"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/119 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.571428571428571,
          "max_score": 10,
          "description": "102/119 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.470588235294118,
          "max_score": 10,
          "description": "42/119 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.037306995790161,
          "max_score": 10,
          "description": "99/119 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8571428571428568,
          "max_score": 10,
          "description": "85/119 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:01:29
score_json:
{
  "run_id": "4a6f125c-1926-4d75-b986-756bcca643ed",
  "timestamp": "2023-03-07T06:01:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-fpm-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.3184818481848195,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.415841584158416,
          "max_score": 10,
          "description": "16/101 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:01:28.104656Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.257425742574258,
          "max_score": 10,
          "description": "43/101 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.191419141914192,
          "max_score": 10,
          "description": "43/101 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.801980198019802,
          "max_score": 10,
          "description": "99/101 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.801980198019802,
          "max_score": 10,
          "description": "2/101 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.900990099009901,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:99, total:101"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/101 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:03:36
score_json:
{
  "run_id": "820b4b0e-2ec9-4a55-bfb9-54eba2dad55d",
  "timestamp": "2023-03-07T06:03:36Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_odoo-16.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.472219767959976,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "495/495 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 495 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:03:32+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.98989898989899,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:494, total:495"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/495 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "495/495 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/495 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "495/495 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.101010101010101,
          "max_score": 10,
          "description": "193/495 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "495/495 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "440/495 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.979748894553038,
          "max_score": 10,
          "description": "318/495 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.484848484848484,
          "max_score": 10,
          "description": "273/495 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:05:41
score_json:
{
  "run_id": "a59049fd-d9f5-4443-8d4d-a155ec5700f4",
  "timestamp": "2023-03-07T06:05:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_odoo-16.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.218758841276754,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/497 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.116700201207244,
          "max_score": 10,
          "description": "193/497 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.979879275653923,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:495, total:497"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.958677831571295,
          "max_score": 10,
          "description": "318/497 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/497 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.507042253521127,
          "max_score": 10,
          "description": "273/497 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "497/497 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/497 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959758551307846,
          "max_score": 10,
          "description": "495/497 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "497/497 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 497 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:05:39.959648Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.853118712273641,
          "max_score": 10,
          "description": "440/497 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:07:45
score_json:
{
  "run_id": "c328068a-a0bb-4248-bc7d-d0be5661ff64",
  "timestamp": "2023-03-07T06:07:45Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_golang-alpine3.16.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.578947368421052,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.315789473684211,
          "max_score": 10,
          "description": "7/19 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 8.947368421052632,
          "max_score": 10,
          "description": "17/19 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.421052631578947,
          "max_score": 10,
          "description": "16/19 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.473684210526316,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:17, total:19"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/19 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 19 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:07:44.536813Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/19 have checksums"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.421052631578947,
          "max_score": 10,
          "description": "16/19 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/19 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/19 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "19/19 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "19/19 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:09:59
score_json:
{
  "run_id": "bde7dae6-c2b3-4d57-b9ea-d249990938cc",
  "timestamp": "2023-03-07T06:09:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_clojure-temurin-8-tools-deps-1.11.1.1224-focal.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.36060660378183,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.875,
          "max_score": 10,
          "description": "123/240 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.979166666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:239, total:240"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "240/240 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "240/240 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:09:56+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/240 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.441298742303252,
          "max_score": 10,
          "description": "137/240 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "240/240 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.791666666666667,
          "max_score": 10,
          "description": "139/240 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.125,
          "max_score": 10,
          "description": "69/240 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 240 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "240/240 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/240 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:12:04
score_json:
{
  "run_id": "31f40e65-838c-4b83-a1ea-48af72ad81ec",
  "timestamp": "2023-03-07T06:12:04Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_clojure-temurin-8-tools-deps-1.11.1.1224-focal.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.101322082157017,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.917355371900827,
          "max_score": 10,
          "description": "123/242 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.917355371900827,
          "max_score": 10,
          "description": "240/242 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "242/242 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958677685950414,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:240, total:242"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/242 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 242 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.1487603305785115,
          "max_score": 10,
          "description": "69/242 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/242 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "242/242 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.340491229917189,
          "max_score": 10,
          "description": "137/242 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:12:02.708048Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.743801652892562,
          "max_score": 10,
          "description": "139/242 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/242 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:14:09
score_json:
{
  "run_id": "25831cbc-8cf7-41f2-b79f-1d9cb0b78f1b",
  "timestamp": "2023-03-07T06:14:09Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haproxy-lts.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.215036800925435,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.8989898989899,
          "max_score": 10,
          "description": "98/99 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.686868686868687,
          "max_score": 10,
          "description": "86/99 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/99 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.464646464646465,
          "max_score": 10,
          "description": "35/99 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "99/99 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:14:08.241871Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.280533998306691,
          "max_score": 10,
          "description": "85/99 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/99 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "99/99 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 99 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.0202020202020203,
          "max_score": 10,
          "description": "79/99 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.94949494949495,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:98, total:99"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/99 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:16:15
score_json:
{
  "run_id": "f4c3ce76-6ed8-41e1-9179-93c11e7f2314",
  "timestamp": "2023-03-07T06:16:15Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_owncloud-9.1-fpm.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.094344580888267,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.346153846153846,
          "max_score": 10,
          "description": "139/260 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.021507002380748,
          "max_score": 10,
          "description": "134/260 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.903846153846153,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:255, total:260"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "260/260 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "260/260 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 266 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:16:13.564619Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/260 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.538461538461538,
          "max_score": 10,
          "description": "64/260 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/260 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.807692307692307,
          "max_score": 10,
          "description": "255/260 have versions"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/260 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.269230769230769,
          "max_score": 10,
          "description": "123/260 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:18:21
score_json:
{
  "run_id": "4e72f21b-8641-4830-9eb7-ce8f76b2b8cc",
  "timestamp": "2023-03-07T06:18:21Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_memcached-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.479057397403683,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.501940027281576,
          "max_score": 10,
          "description": "89/101 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.534653465346535,
          "max_score": 10,
          "description": "35/101 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.811881188118813,
          "max_score": 10,
          "description": "89/101 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9504950495049505,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:100, total:101"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "101/101 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:18:19+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.782178217821782,
          "max_score": 10,
          "description": "83/101 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:20:27
score_json:
{
  "run_id": "410af64d-a0a8-4145-9d87-dd8f439231c7",
  "timestamp": "2023-03-07T06:20:27Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mageia-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.131022135416666,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.4453125,
          "max_score": 10,
          "description": "219/256 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 256 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/256 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/256 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "256/256 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:20:24.848875Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4876302083333333,
          "max_score": 10,
          "description": "42/256 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9609375,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:254, total:256"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/256 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "256/256 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.8828125,
          "max_score": 10,
          "description": "253/256 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.8828125,
          "max_score": 10,
          "description": "253/256 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.9609375,
          "max_score": 10,
          "description": "1/256 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:26:35
score_json:
{
  "run_id": "8f6ff066-89fe-4fb3-b54d-c97ec6c1bd15",
  "timestamp": "2023-03-07T06:26:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_django-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.189341000311745,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:26:33.845666Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.2868200062349,
          "max_score": 10,
          "description": "142/188 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.946808510638298,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:186, total:188"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 188 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.127659574468085,
          "max_score": 10,
          "description": "54/188 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.712765957446809,
          "max_score": 10,
          "description": "145/188 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/188 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.893617021276595,
          "max_score": 10,
          "description": "186/188 have versions"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8191489361702127,
          "max_score": 10,
          "description": "135/188 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:27:18
score_json:
{
  "run_id": "37d0a581-36d5-4ce5-aedc-6feb2daecc76",
  "timestamp": "2023-03-07T06:27:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-7.17.9.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.322230199314302,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 362 relationships "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "362/362 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "362/362 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:27:15+00:00"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/362 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "362/362 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/362 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.425266969711468,
          "max_score": 10,
          "description": "105/362 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.375690607734806,
          "max_score": 10,
          "description": "95/362 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.986187845303867,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:361, total:362"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "362/362 components have primary purpose specified"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.9281767955801103,
          "max_score": 10,
          "description": "106/362 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.7292817679558,
          "max_score": 10,
          "description": "46/362 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:27:21
score_json:
{
  "run_id": "cbd8b233-3a52-4563-975f-c082b24f8ac0",
  "timestamp": "2023-03-07T06:27:21Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-7.17.9.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.066303603403727,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "364/364 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.3901098901098905,
          "max_score": 10,
          "description": "95/364 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/364 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.945054945054945,
          "max_score": 10,
          "description": "362/364 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:27:20.625598Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/364 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "364/364 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.3700281120306075,
          "max_score": 10,
          "description": "105/364 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.736263736263737,
          "max_score": 10,
          "description": "46/364 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/364 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 365 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.9120879120879124,
          "max_score": 10,
          "description": "106/364 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.972527472527473,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:362, total:364"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:29:28
score_json:
{
  "run_id": "2bfcafcd-3857-4bcd-8e22-769e3fc28c4a",
  "timestamp": "2023-03-07T06:29:28Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gcc-9.5.0-buster.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.369579796689772,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "414/414 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.1814510062591905,
          "max_score": 10,
          "description": "283/414 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987922705314009,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:413, total:414"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 414 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.222222222222222,
          "max_score": 10,
          "description": "299/414 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:29:24+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.864734299516908,
          "max_score": 10,
          "description": "254/414 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.1352657004830915,
          "max_score": 10,
          "description": "160/414 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:31:34
score_json:
{
  "run_id": "0360d4bc-1e21-4213-96f9-450bc2171045",
  "timestamp": "2023-03-07T06:31:33Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gcc-9.5.0-buster.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.117994154918323,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:31:31.459183Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.2048192771084345,
          "max_score": 10,
          "description": "299/415 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/415 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "415/415 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "415/415 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.1671120140290965,
          "max_score": 10,
          "description": "283/415 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8795180722891565,
          "max_score": 10,
          "description": "254/415 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9879518072289155,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:414, total:415"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.144578313253012,
          "max_score": 10,
          "description": "160/415 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/415 have supplier names"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975903614457831,
          "max_score": 10,
          "description": "414/415 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 415 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/415 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:37:44
score_json:
{
  "run_id": "bd6e8bef-d5b4-4386-81c1-dd6f13970088",
  "timestamp": "2023-03-07T06:37:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3-onbuild.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.438812960786301,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9825174825174825,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:570, total:572"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.513986013986013,
          "max_score": 10,
          "description": "85/572 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.730804670271452,
          "max_score": 10,
          "description": "428/572 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:37:40.928908Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.961538461538462,
          "max_score": 10,
          "description": "231/572 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/572 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965034965034965,
          "max_score": 10,
          "description": "570/572 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 572 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.622377622377622,
          "max_score": 10,
          "description": "436/572 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:37:46
score_json:
{
  "run_id": "675d4c8d-fa18-40b3-9c3c-eb5b6b076bf1",
  "timestamp": "2023-03-07T06:37:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_odoo-12.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.493130340459691,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.679180887372014,
          "max_score": 10,
          "description": "225/293 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "293/293 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.607508532423209,
          "max_score": 10,
          "description": "158/293 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "293/293 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:37:45+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.83530305492763,
          "max_score": 10,
          "description": "206/293 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/293 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/293 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "293/293 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "293/293 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 293 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982935153583617,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:292, total:293"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.757679180887371,
          "max_score": 10,
          "description": "95/293 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:37:49
score_json:
{
  "run_id": "58a065be-1650-4f4d-9aad-9c6960a8a511",
  "timestamp": "2023-03-07T06:37:49Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_odoo-12.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.2371577923018595,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.627118644067796,
          "max_score": 10,
          "description": "225/295 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.79400330366432,
          "max_score": 10,
          "description": "206/295 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.779661016949152,
          "max_score": 10,
          "description": "95/295 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/295 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/295 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:37:48.934639Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/295 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "295/295 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.932203389830509,
          "max_score": 10,
          "description": "293/295 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.966101694915254,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:293, total:295"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "295/295 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 295 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.6440677966101696,
          "max_score": 10,
          "description": "158/295 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:40:42
score_json:
{
  "run_id": "158974f6-8e78-4895-a6d6-ba7247c6b458",
  "timestamp": "2023-03-07T06:40:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.2.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1358090762584725,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.336996336996337,
          "max_score": 10,
          "description": "100/273 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8095238095238093,
          "max_score": 10,
          "description": "169/273 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/273 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.445119254107161,
          "max_score": 10,
          "description": "191/273 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981684981684982,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:272, total:273"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:40:40.197536Z"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.963369963369964,
          "max_score": 10,
          "description": "272/273 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 273 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.17948717948718,
          "max_score": 10,
          "description": "196/273 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:42:48
score_json:
{
  "run_id": "b2bba268-77b2-4b35-9637-86a5d7200f90",
  "timestamp": "2023-03-07T06:42:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_tomcat-9.0.72-jdk17-corretto-al2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.383902362114436,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 153 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.967320261437909,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:152, total:153"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.6601307189542482,
          "max_score": 10,
          "description": "97/153 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "153/153 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "153/153 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/153 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "153/153 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:42:46+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/153 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4688969154913427,
          "max_score": 10,
          "description": "29/153 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "153/153 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/153 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5816993464052285,
          "max_score": 10,
          "description": "116/153 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:44:52
score_json:
{
  "run_id": "9f38743f-68e1-4879-8df0-1a353e2ce20e",
  "timestamp": "2023-03-07T06:44:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_tomcat-9.0.72-jdk17-corretto-al2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.124110073571025,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.870967741935484,
          "max_score": 10,
          "description": "153/155 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "155/155 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:44:51.913301Z"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 156 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/155 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4499434069043575,
          "max_score": 10,
          "description": "29/155 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/155 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "155/155 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.483870967741936,
          "max_score": 10,
          "description": "116/155 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.935483870967742,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:153, total:155"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/155 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/155 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.741935483870968,
          "max_score": 10,
          "description": "97/155 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:47:09
score_json:
{
  "run_id": "be8e1a37-b863-4d37-9c9c-cefea6c35da3",
  "timestamp": "2023-03-07T06:47:09Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_percona-psmdb-5.0.10.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.150888324873097,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "197/197 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:47:07.856625Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/197 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/197 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.949238578680204,
          "max_score": 10,
          "description": "196/197 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 197 relationships "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "197/197 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.974619289340102,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:196, total:197"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.5736040609137056,
          "max_score": 10,
          "description": "166/197 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.6725888324873097,
          "max_score": 10,
          "description": "42/197 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.898477157360405,
          "max_score": 10,
          "description": "195/197 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.949238578680204,
          "max_score": 10,
          "description": "1/197 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/197 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:49:15
score_json:
{
  "run_id": "f647bb84-e7e7-489e-83cf-af15949e27f2",
  "timestamp": "2023-03-07T06:49:15Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_wordpress-beta-6-php8.1-fpm.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3773399654704335,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.054298642533936,
          "max_score": 10,
          "description": "178/221 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/221 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.872591164612297,
          "max_score": 10,
          "description": "174/221 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.1221719457013575,
          "max_score": 10,
          "description": "152/221 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "221/221 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:49:13+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.520361990950226,
          "max_score": 10,
          "description": "99/221 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "221/221 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "221/221 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 221 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "221/221 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/221 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.97737556561086,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:220, total:221"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:51:21
score_json:
{
  "run_id": "b893a58b-6334-4255-a593-a09e085920e6",
  "timestamp": "2023-03-07T06:51:21Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-apache-bullseye.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.365434908622747,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.798387096774194,
          "max_score": 10,
          "description": "129/248 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959677419354839,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:246, total:248"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 248 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/248 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.607085269229101,
          "max_score": 10,
          "description": "149/248 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "248/248 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.693548387096774,
          "max_score": 10,
          "description": "82/248 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.290322580645161,
          "max_score": 10,
          "description": "156/248 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:51:19+00:00"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "248/248 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959677419354838,
          "max_score": 10,
          "description": "247/248 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:53:27
score_json:
{
  "run_id": "94637a5c-fda0-40e4-9c51-374c5558f1ac",
  "timestamp": "2023-03-07T06:53:27Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-apache-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112860306477108,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "249/249 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.586523398618462,
          "max_score": 10,
          "description": "149/249 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959839357429719,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:247, total:249"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:53:25.350927Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.706827309236948,
          "max_score": 10,
          "description": "82/249 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 249 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.8192771084337345,
          "max_score": 10,
          "description": "129/249 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/249 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.919678714859439,
          "max_score": 10,
          "description": "247/249 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "249/249 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.265060240963855,
          "max_score": 10,
          "description": "156/249 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/249 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/249 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:55:42
score_json:
{
  "run_id": "0883c0f4-a948-4f83-99d4-ae1f927bf156",
  "timestamp": "2023-03-07T06:55:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.236556898707795,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:55:39+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.887453105460608,
          "max_score": 10,
          "description": "4744/4798 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.880158399333055,
          "max_score": 10,
          "description": "4741/4798 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972905377240517,
          "max_score": 10,
          "description": "13/4798 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4798 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.998957899124635,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4797, total:4798"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991663192997082,
          "max_score": 10,
          "description": "4/4798 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4798 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4798 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:57:53
score_json:
{
  "run_id": "5396c8f9-14a8-4d0f-8490-e78813e6e466",
  "timestamp": "2023-03-07T06:57:53Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.985885416666666,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4800 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:57:46.434463Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4800/4800 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4800 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991666666666667,
          "max_score": 10,
          "description": "4/4800 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972916666666666,
          "max_score": 10,
          "description": "13/4800 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4800 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.883333333333333,
          "max_score": 10,
          "description": "4744/4800 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.876041666666667,
          "max_score": 10,
          "description": "4741/4800 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4800/4800 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.995833333333334,
          "max_score": 10,
          "description": "4798/4800 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.997916666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4798, total:4800"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/4800 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 06:59:59
score_json:
{
  "run_id": "812b8ced-1ba8-4779-91a2-2d4b1874f8bc",
  "timestamp": "2023-03-07T06:59:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haproxy-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.215036800925435,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/99 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "99/99 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.686868686868687,
          "max_score": 10,
          "description": "86/99 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.280533998306691,
          "max_score": 10,
          "description": "85/99 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "99/99 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.0202020202020203,
          "max_score": 10,
          "description": "79/99 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/99 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.464646464646465,
          "max_score": 10,
          "description": "35/99 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.8989898989899,
          "max_score": 10,
          "description": "98/99 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 99 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T06:59:58.075638Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/99 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.94949494949495,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:98, total:99"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:02:08
score_json:
{
  "run_id": "36fda01a-e299-4240-9110-0ba61e5fae2c",
  "timestamp": "2023-03-07T07:02:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kibana-8.6.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.80661412261586,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1136 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.982394366197182,
          "max_score": 10,
          "description": "1134/1136 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1136/1136 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:02:03.722683Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.74671907203553,
          "max_score": 10,
          "description": "1081/1136 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1136 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.110915492957746,
          "max_score": 10,
          "description": "101/1136 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1136 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1136 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.639084507042254,
          "max_score": 10,
          "description": "1095/1136 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991197183098591,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1134, total:1136"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.661971830985916,
          "max_score": 10,
          "description": "152/1136 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1136/1136 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:04:16
score_json:
{
  "run_id": "54c532c4-0411-41ae-97fb-25d8ebb41a06",
  "timestamp": "2023-03-07T07:04:16Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_erlang-24.3.4.7.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3854322058993604,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.615780445969125,
          "max_score": 10,
          "description": "444/583 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6192109777015435,
          "max_score": 10,
          "description": "372/583 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "583/583 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 583 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.598867102549804,
          "max_score": 10,
          "description": "428/583 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:04:12+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991423670668953,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:582, total:583"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.88336192109777,
          "max_score": 10,
          "description": "240/583 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:06:22
score_json:
{
  "run_id": "5d092812-655e-423e-8ce5-a68a91fc12aa",
  "timestamp": "2023-03-07T07:06:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_erlang-24.3.4.7.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.134250837088767,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.982876712328768,
          "max_score": 10,
          "description": "583/584 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:06:19.695718Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.5874140020493,
          "max_score": 10,
          "description": "428/584 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.602739726027398,
          "max_score": 10,
          "description": "444/584 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.89041095890411,
          "max_score": 10,
          "description": "240/584 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6301369863013697,
          "max_score": 10,
          "description": "372/584 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/584 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:08:29
score_json:
{
  "run_id": "236d8570-f8e7-41b1-95c7-b2f14b491fdf",
  "timestamp": "2023-03-07T07:08:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_irssi-1.4-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.765306122448979,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:08:27.422089Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "46/49 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.081632653061224,
          "max_score": 10,
          "description": "46/49 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "3/49 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.795918367346939,
          "max_score": 10,
          "description": "48/49 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 49 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.755102040816326,
          "max_score": 10,
          "description": "11/49 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.8979591836734695,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:48, total:49"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/49 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:13:25
score_json:
{
  "run_id": "7f53ea6a-5aba-4f67-ba4e-38c2aeeb9195",
  "timestamp": "2023-03-07T07:13:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.5.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.295081607158236,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "580/580 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 580 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:13:20+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/580 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.5137011086819854,
          "max_score": 10,
          "description": "105/580 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "580/580 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8275862068965518,
          "max_score": 10,
          "description": "106/580 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.36206896551724,
          "max_score": 10,
          "description": "95/580 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/580 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "580/580 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "580/580 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.206896551724137,
          "max_score": 10,
          "description": "46/580 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991379310344827,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:579, total:580"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:13:29
score_json:
{
  "run_id": "3d6efe3b-f922-4b02-8b6d-67d40a7e709d",
  "timestamp": "2023-03-07T07:13:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_elasticsearch-8.5.2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.041468233056628,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4822856233318578,
          "max_score": 10,
          "description": "105/582 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.982817869415808,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:580, total:582"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "582/582 have names"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 585 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 1.8213058419243986,
          "max_score": 10,
          "description": "106/582 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "582/582 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:13:28.275566Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/582 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.367697594501719,
          "max_score": 10,
          "description": "95/582 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/582 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/582 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965635738831615,
          "max_score": 10,
          "description": "580/582 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.209621993127147,
          "max_score": 10,
          "description": "46/582 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:15:43
score_json:
{
  "run_id": "6b1c9b19-c005-44ed-9299-41b85b47d710",
  "timestamp": "2023-03-07T07:15:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_logstash-8.6.2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.348558511938428,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 532 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/529 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.731094624401802,
          "max_score": 10,
          "description": "270/529 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.943289224952741,
          "max_score": 10,
          "description": "526/529 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.918714555765595,
          "max_score": 10,
          "description": "366/529 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.296786389413988,
          "max_score": 10,
          "description": "143/529 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "529/529 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/529 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "529/529 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:15:40.479712Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.109640831758034,
          "max_score": 10,
          "description": "100/529 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9716446124763705,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:526, total:529"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/529 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:17:48
score_json:
{
  "run_id": "d21f07ac-29af-4b63-ab8b-f5d0994b6767",
  "timestamp": "2023-03-07T07:17:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_java-openjdk-8u111-jdk-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.43918918918919,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.72972972972973,
          "max_score": 10,
          "description": "36/37 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.486486486486487,
          "max_score": 10,
          "description": "24/37 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.216216216216216,
          "max_score": 10,
          "description": "14/37 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.864864864864865,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:36, total:37"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.45945945945946,
          "max_score": 10,
          "description": "35/37 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 37 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.027027027027027,
          "max_score": 10,
          "description": "11/37 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:17:47.026311Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/37 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:19:53
score_json:
{
  "run_id": "7bc7a6c5-1270-4e6b-a355-0153209eaf04",
  "timestamp": "2023-03-07T07:19:53Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_postgres-15.2-alpine3.17.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.644557823129253,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.70748299319728,
          "max_score": 10,
          "description": "43/49 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 49 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:19:52.064299Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.795918367346939,
          "max_score": 10,
          "description": "48/49 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.387755102040817,
          "max_score": 10,
          "description": "46/49 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.8979591836734695,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:48, total:49"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "49/49 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/49 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.918367346938775,
          "max_score": 10,
          "description": "20/49 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/49 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.183673469387756,
          "max_score": 10,
          "description": "4/49 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:21:57
score_json:
{
  "run_id": "f784cacf-39d4-4cbf-aad6-b337f0860bd2",
  "timestamp": "2023-03-07T07:21:57Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_arangodb-3.8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.911742983751847,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/677 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.231905465288035,
          "max_score": 10,
          "description": "625/677 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977843426883309,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:674, total:677"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "677/677 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 677 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:21:56.803553Z"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "677/677 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.955686853766618,
          "max_score": 10,
          "description": "674/677 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/677 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.98522895125554,
          "max_score": 10,
          "description": "1/677 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.246676514032496,
          "max_score": 10,
          "description": "626/677 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.83751846381093,
          "max_score": 10,
          "description": "11/677 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/677 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:24:03
score_json:
{
  "run_id": "daa4f368-2dac-46d8-ac05-1531b9742687",
  "timestamp": "2023-03-07T07:24:03Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_postgres-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.394714432243323,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 150 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.694288644866447,
          "max_score": 10,
          "description": "129/150 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.666666666666668,
          "max_score": 10,
          "description": "130/150 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.6000000000000005,
          "max_score": 10,
          "description": "66/150 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:24:01+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.933333333333334,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:148, total:150"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.933333333333334,
          "max_score": 10,
          "description": "149/150 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.0666666666666664,
          "max_score": 10,
          "description": "119/150 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "150/150 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:26:08
score_json:
{
  "run_id": "ddab02d3-3081-45cd-81b9-7bf152c352da",
  "timestamp": "2023-03-07T07:26:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_postgres-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1402749921248825,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.867549668874172,
          "max_score": 10,
          "description": "149/151 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 151 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.609271523178808,
          "max_score": 10,
          "description": "130/151 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.646559445146667,
          "max_score": 10,
          "description": "129/151 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.629139072847682,
          "max_score": 10,
          "description": "66/151 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "151/151 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "151/151 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/151 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/151 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:26:07.043738Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/151 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.119205298013245,
          "max_score": 10,
          "description": "119/151 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.933774834437086,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:149, total:151"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:28:14
score_json:
{
  "run_id": "450510b2-304b-41d8-bea4-3d6c1ce2348b",
  "timestamp": "2023-03-07T07:28:14Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_neo4j-5.5.0-enterprise.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.04754667393293,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "453/453 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.075055187637969,
          "max_score": 10,
          "description": "94/453 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.11699779249448,
          "max_score": 10,
          "description": "40/453 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "453/453 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.966887417218543,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:450, total:453"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/453 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.933774834437086,
          "max_score": 10,
          "description": "450/453 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 457 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.7125228826321466,
          "max_score": 10,
          "description": "92/453 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:28:12.14022Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/453 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.145695364238412,
          "max_score": 10,
          "description": "84/453 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/453 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:30:19
score_json:
{
  "run_id": "7abb623a-c5a0-4620-8ea2-b58d4f3691be",
  "timestamp": "2023-03-07T07:30:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-slim.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.905208333333334,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.882716049382715,
          "max_score": 10,
          "description": "101/324 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.04320987654321,
          "max_score": 10,
          "description": "31/324 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/324 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "324/324 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.397376543209877,
          "max_score": 10,
          "description": "284/324 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "324/324 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "324/324 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 324 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:30:18+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/324 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.984567901234568,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:323, total:324"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "324/324 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.796296296296296,
          "max_score": 10,
          "description": "285/324 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:30:21
score_json:
{
  "run_id": "9b61d4bc-59e8-4d47-8dce-04995d71c514",
  "timestamp": "2023-03-07T07:30:21Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.647314967752085,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 326 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.969325153374234,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:324, total:326"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.049079754601227,
          "max_score": 10,
          "description": "31/326 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.938650306748468,
          "max_score": 10,
          "description": "324/326 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.345072361176657,
          "max_score": 10,
          "description": "284/326 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:30:21.229413Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.742331288343557,
          "max_score": 10,
          "description": "285/326 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.901840490797547,
          "max_score": 10,
          "description": "101/326 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:32:27
score_json:
{
  "run_id": "25917b70-ee9a-4331-b95a-d7696f57007b",
  "timestamp": "2023-03-07T07:32:27Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_neurodebian-nd18.04-non-free.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.144453060380478,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959677419354839,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:123, total:124"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/124 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.048387096774194,
          "max_score": 10,
          "description": "49/124 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "124/124 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:32:26.299551Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.693548387096774,
          "max_score": 10,
          "description": "103/124 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/124 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "124/124 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.800351530190238,
          "max_score": 10,
          "description": "105/124 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 124 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.467741935483872,
          "max_score": 10,
          "description": "105/124 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/124 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.919354838709678,
          "max_score": 10,
          "description": "123/124 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:35:36
score_json:
{
  "run_id": "31393a4d-3aac-4bf5-be47-a0da4a3513c7",
  "timestamp": "2023-03-07T07:35:36Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_logstash-7.17.7.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.560561258557473,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "535/535 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "535/535 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/535 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.990654205607477,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:534, total:535"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.5420560747663545,
          "max_score": 10,
          "description": "350/535 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.332720498252268,
          "max_score": 10,
          "description": "250/535 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.093457943925234,
          "max_score": 10,
          "description": "102/535 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.252336448598131,
          "max_score": 10,
          "description": "147/535 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/535 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "535/535 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:35:33+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "535/535 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 535 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:35:39
score_json:
{
  "run_id": "d8396b60-5906-4181-bd6c-ecfcdaa4fc78",
  "timestamp": "2023-03-07T07:35:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_logstash-7.17.7.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.302764782184809,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "538/538 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.944237918215613,
          "max_score": 10,
          "description": "535/538 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "538/538 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/538 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.249070631970261,
          "max_score": 10,
          "description": "148/538 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/538 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 541 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/538 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.5055762081784385,
          "max_score": 10,
          "description": "350/538 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.261615346298425,
          "max_score": 10,
          "description": "249/538 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:35:38.527655Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.12267657992565,
          "max_score": 10,
          "description": "101/538 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9721189591078065,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:535, total:538"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:37:45
score_json:
{
  "run_id": "232bb944-f245-4b33-9943-3e3222fcd029",
  "timestamp": "2023-03-07T07:37:45Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gcc-9-buster.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.117994154918323,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.144578313253012,
          "max_score": 10,
          "description": "160/415 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/415 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:37:42.871377Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8795180722891565,
          "max_score": 10,
          "description": "254/415 components have deprecated licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/415 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.1671120140290965,
          "max_score": 10,
          "description": "283/415 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9879518072289155,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:414, total:415"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/415 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975903614457831,
          "max_score": 10,
          "description": "414/415 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.2048192771084345,
          "max_score": 10,
          "description": "299/415 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "415/415 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "415/415 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 415 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:39:52
score_json:
{
  "run_id": "62250357-d937-4565-8a94-cf39718b3d20",
  "timestamp": "2023-03-07T07:39:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_lightstreamer-7.3.3-jdk8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.107103002886203,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "234/234 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.914529914529915,
          "max_score": 10,
          "description": "232/234 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:39:51.0839Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 234 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/234 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.278812194476206,
          "max_score": 10,
          "description": "124/234 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.170940170940171,
          "max_score": 10,
          "description": "113/234 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/234 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.478632478632479,
          "max_score": 10,
          "description": "59/234 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/234 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.3418803418803416,
          "max_score": 10,
          "description": "125/234 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "234/234 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957264957264957,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:232, total:234"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:41:59
score_json:
{
  "run_id": "3939ec8a-9e20-47c2-b53e-4e4208a3c899",
  "timestamp": "2023-03-07T07:41:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_sonarqube-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.299366877734616,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "531/531 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.4105461393596985,
          "max_score": 10,
          "description": "128/531 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.919540944522825,
          "max_score": 10,
          "description": "126/531 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "531/531 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/531 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "531/531 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/531 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "531/531 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.815442561205273,
          "max_score": 10,
          "description": "116/531 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.990583804143126,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:530, total:531"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.851224105461394,
          "max_score": 10,
          "description": "61/531 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 531 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:41:56+00:00"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:44:06
score_json:
{
  "run_id": "1453e3d3-e30f-4ee5-a4ef-d140a02150e1",
  "timestamp": "2023-03-07T07:44:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_sonarqube-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.047750453216248,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 533 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/533 have supplier names"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "533/533 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981238273921201,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:531, total:533"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "533/533 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/533 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.9306188204225325,
          "max_score": 10,
          "description": "127/533 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.804878048780488,
          "max_score": 10,
          "description": "117/533 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.962476547842401,
          "max_score": 10,
          "description": "531/533 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:44:03.194322Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.401500938086304,
          "max_score": 10,
          "description": "128/533 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/533 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.874296435272045,
          "max_score": 10,
          "description": "60/533 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:46:51
score_json:
{
  "run_id": "acf1f0cc-3115-4515-98f1-f9214dd7e8b7",
  "timestamp": "2023-03-07T07:46:51Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_kibana-8.5.3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.815548442634413,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.828699349142166,
          "max_score": 10,
          "description": "1075/1128 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1128/1128 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:46:47.390433Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1128 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.104609929078014,
          "max_score": 10,
          "description": "101/1128 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.99113475177305,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1126, total:1128"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "141/1128 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.654255319148938,
          "max_score": 10,
          "description": "1089/1128 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1128 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1128 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9822695035461,
          "max_score": 10,
          "description": "1126/1128 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1128/1128 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1128 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:48:57
score_json:
{
  "run_id": "caa623c9-79c6-44cc-8dfd-823fb94f83a0",
  "timestamp": "2023-03-07T07:48:57Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_erlang-26.0-rc1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3854322058993604,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.615780445969125,
          "max_score": 10,
          "description": "444/583 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "583/583 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.88336192109777,
          "max_score": 10,
          "description": "240/583 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.598867102549804,
          "max_score": 10,
          "description": "428/583 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6192109777015435,
          "max_score": 10,
          "description": "372/583 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991423670668953,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:582, total:583"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:48:55+00:00"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 583 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 07:51:03
score_json:
{
  "run_id": "981837fb-95dc-4a36-a8e1-de13780da22e",
  "timestamp": "2023-03-07T07:51:03Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_erlang-26.0-rc1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1351070014723295,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/584 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.907534246575342,
          "max_score": 10,
          "description": "239/584 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T07:51:00.858578Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.602739726027398,
          "max_score": 10,
          "description": "444/584 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.604537289720532,
          "max_score": 10,
          "description": "429/584 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.982876712328768,
          "max_score": 10,
          "description": "583/584 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.613013698630137,
          "max_score": 10,
          "description": "373/584 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


