# scores

updated_at: 2023-03-03 09:51:10
score_json:
{
  "run_id": "0d0fda17-c282-4bc5-a2f7-385b89a3c8d6",
  "timestamp": "2023-03-03T09:51:10Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-unstable-curl.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.063978534411932,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "128/128 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.328125,
          "max_score": 10,
          "description": "111/128 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.828125,
          "max_score": 10,
          "description": "79/128 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/128 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/128 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.709258188238629,
          "max_score": 10,
          "description": "119/128 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9609375,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:127, total:128"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/128 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.921875,
          "max_score": 10,
          "description": "127/128 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T09:51:10.158307Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "128/128 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 128 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.53125,
          "max_score": 10,
          "description": "122/128 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:05:25
score_json:
{
  "run_id": "0b886846-b6ca-41c8-86c0-1352ae66393c",
  "timestamp": "2023-03-03T10:05:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ubuntu-debootstrap-15.04.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.520544554455445,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "101/101 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.638613861386139,
          "max_score": 10,
          "description": "85/101 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9504950495049505,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:100, total:101"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:38:03+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/101 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.7227722772277225,
          "max_score": 10,
          "description": "23/101 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 101 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.6831683168316833,
          "max_score": 10,
          "description": "84/101 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "101/101 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.415841584158416,
          "max_score": 10,
          "description": "85/101 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:05:26
score_json:
{
  "run_id": "c342d312-8741-4975-8459-7ed9f0511934",
  "timestamp": "2023-03-03T10:05:26Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ubuntu-debootstrap-15.04.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.262864504776269,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 102 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.7647058823529413,
          "max_score": 10,
          "description": "84/102 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/102 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.901960784313726,
          "max_score": 10,
          "description": "101/102 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:38:04.266987Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.333333333333334,
          "max_score": 10,
          "description": "85/102 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.950980392156863,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:101, total:102"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.745098039215686,
          "max_score": 10,
          "description": "23/102 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.561211664152841,
          "max_score": 10,
          "description": "85/102 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:05:26
score_json:
{
  "run_id": "b43ab3cb-027d-46bd-b82c-4583fb86c1f8",
  "timestamp": "2023-03-03T10:05:26Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ubuntu-debootstrap-15.04.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.262864504776269,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.333333333333334,
          "max_score": 10,
          "description": "85/102 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.7647058823529413,
          "max_score": 10,
          "description": "84/102 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.950980392156863,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:101, total:102"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/102 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 102 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.901960784313726,
          "max_score": 10,
          "description": "101/102 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.561211664152841,
          "max_score": 10,
          "description": "85/102 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.745098039215686,
          "max_score": 10,
          "description": "23/102 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:38:04.856855Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:05:37
score_json:
{
  "run_id": "75f83ab2-9b7e-4d6c-9c5a-548123834c4a",
  "timestamp": "2023-03-03T10:05:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ubuntu-debootstrap-14.04.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.592424242424242,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "110/110 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/110 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "110/110 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:38:47+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.530303030303029,
          "max_score": 10,
          "description": "87/110 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.2727272727272725,
          "max_score": 10,
          "description": "85/110 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.954545454545455,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:109, total:110"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "110/110 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 110 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.909090909090909,
          "max_score": 10,
          "description": "87/110 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "110/110 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/110 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.181818181818182,
          "max_score": 10,
          "description": "9/110 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:05:38
score_json:
{
  "run_id": "9b191429-71cf-4f21-83c9-a384dd037545",
  "timestamp": "2023-03-03T10:05:38Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ubuntu-debootstrap-14.04.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.334719334719336,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/111 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 111 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.46015246015246,
          "max_score": 10,
          "description": "87/111 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "111/111 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.837837837837838,
          "max_score": 10,
          "description": "87/111 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/111 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.18918918918919,
          "max_score": 10,
          "description": "9/111 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.90990990990991,
          "max_score": 10,
          "description": "110/111 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/111 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.3423423423423424,
          "max_score": 10,
          "description": "85/111 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "111/111 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:38:48.530079Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.954954954954955,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:110, total:111"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:05:38
score_json:
{
  "run_id": "e95904b9-6352-4bb8-a62f-4db276020011",
  "timestamp": "2023-03-03T10:05:38Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ubuntu-debootstrap-14.04.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.334719334719334,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "111/111 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.837837837837838,
          "max_score": 10,
          "description": "87/111 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/111 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.3423423423423424,
          "max_score": 10,
          "description": "85/111 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/111 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.18918918918919,
          "max_score": 10,
          "description": "9/111 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.46015246015246,
          "max_score": 10,
          "description": "87/111 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.90990990990991,
          "max_score": 10,
          "description": "110/111 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "111/111 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 111 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/111 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:38:49.14912Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.954954954954955,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:110, total:111"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:10:29
score_json:
{
  "run_id": "7c3c3be2-80e9-4c21-b96e-b6a7893fb676",
  "timestamp": "2023-03-03T10:10:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.2-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.402222222222221,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:51:26+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1333333333333333,
          "max_score": 10,
          "description": "49/225 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.844444444444445,
          "max_score": 10,
          "description": "26/225 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977777777777778,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:224, total:225"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.2,
          "max_score": 10,
          "description": "72/225 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/225 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "25/225 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/225 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 225 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "225/225 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:10:30
score_json:
{
  "run_id": "591b93c6-305c-4578-a8e8-2bfe1c846eed",
  "timestamp": "2023-03-03T10:10:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.2-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.145374449339208,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1145374449339207,
          "max_score": 10,
          "description": "49/227 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.898678414096917,
          "max_score": 10,
          "description": "25/227 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 243 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.911894273127754,
          "max_score": 10,
          "description": "225/227 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.854625550660792,
          "max_score": 10,
          "description": "26/227 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.955947136563877,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:227"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1718061674008813,
          "max_score": 10,
          "description": "72/227 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:51:29.311944Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/227 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:10:31
score_json:
{
  "run_id": "b3bb1fa7-23a9-491a-a0fe-22529367f97d",
  "timestamp": "2023-03-03T10:10:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.2-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.145374449339208,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.911894273127754,
          "max_score": 10,
          "description": "225/227 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.854625550660792,
          "max_score": 10,
          "description": "26/227 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 243 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/227 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1145374449339207,
          "max_score": 10,
          "description": "49/227 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.955947136563877,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:227"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:51:30.508305Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.898678414096917,
          "max_score": 10,
          "description": "25/227 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "227/227 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1718061674008813,
          "max_score": 10,
          "description": "72/227 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/227 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:10:43
score_json:
{
  "run_id": "b79c0861-d498-4f36-92ee-f842a2c24e37",
  "timestamp": "2023-03-03T10:10:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.382758696058817,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/486 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "486/486 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/486 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "486/486 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.711934156378601,
          "max_score": 10,
          "description": "229/486 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.989711934156379,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:485, total:486"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 486 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "486/486 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T05:51:58+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.8383014931927972,
          "max_score": 10,
          "description": "221/486 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.823045267489712,
          "max_score": 10,
          "description": "203/486 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "486/486 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.292181069958847,
          "max_score": 10,
          "description": "83/486 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:35
score_json:
{
  "run_id": "e2b9b6ad-356b-491d-b077-35a085cb19d5",
  "timestamp": "2023-03-03T10:23:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-4.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.357018072380467,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.123249299719888,
          "max_score": 10,
          "description": "223/714 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.992997198879552,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:713, total:714"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/714 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:26:24+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "714/714 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "714/714 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.6935827361247524,
          "max_score": 10,
          "description": "218/714 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.170868347338936,
          "max_score": 10,
          "description": "202/714 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "714/714 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/714 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.159663865546218,
          "max_score": 10,
          "description": "60/714 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "714/714 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 714 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:37
score_json:
{
  "run_id": "9a6e3d86-b20c-4054-a45f-89ad307a7cf6",
  "timestamp": "2023-03-03T10:23:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-4.0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.104937517673202,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.972067039106145,
          "max_score": 10,
          "description": "714/716 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:26:29.769578Z"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 759 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.6853425322349898,
          "max_score": 10,
          "description": "218/716 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/716 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.162011173184357,
          "max_score": 10,
          "description": "60/716 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1145251396648046,
          "max_score": 10,
          "description": "223/716 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.178770949720671,
          "max_score": 10,
          "description": "202/716 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9860335195530725,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:714, total:716"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:38
score_json:
{
  "run_id": "3da05a42-2191-4e1d-95b7-34b58426f10c",
  "timestamp": "2023-03-03T10:23:38Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-4.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.104937517673202,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/716 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.162011173184357,
          "max_score": 10,
          "description": "60/716 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1145251396648046,
          "max_score": 10,
          "description": "223/716 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.6853425322349898,
          "max_score": 10,
          "description": "218/716 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9860335195530725,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:714, total:716"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 759 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:26:31.8782Z"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.972067039106145,
          "max_score": 10,
          "description": "714/716 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.178770949720671,
          "max_score": 10,
          "description": "202/716 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:38
score_json:
{
  "run_id": "0414d5a1-d130-4760-87c4-fa166c87cf5b",
  "timestamp": "2023-03-03T10:23:38Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_glassfish-4.0.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.243865030674846,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 325 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:28:24Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.723926380368098,
          "max_score": 10,
          "description": "317/326 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.877300613496932,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:318, total:326"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.27607361963190186,
          "max_score": 10,
          "description": "9/326 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:39
score_json:
{
  "run_id": "aab73261-fe45-4261-8c3e-a445ae43bb39",
  "timestamp": "2023-03-03T10:23:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_glassfish-4.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "tag-value",
      "avg_score": 6.730061349693253,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.27607361963190186,
          "max_score": 10,
          "description": "9/326 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:28:27Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.877300613496932,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:318, total:326"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.723926380368098,
          "max_score": 10,
          "description": "317/326 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 9.723926380368098,
          "max_score": 10,
          "description": "317/326 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 326 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:40
score_json:
{
  "run_id": "2df7b832-4539-427f-bd7b-47a6b4e393d3",
  "timestamp": "2023-03-03T10:23:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-4.0-jdk7.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.357718352492512,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/714 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/714 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "714/714 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "714/714 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.173669467787114,
          "max_score": 10,
          "description": "59/714 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.123249299719888,
          "max_score": 10,
          "description": "223/714 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.992997198879552,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:713, total:714"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:31:59+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.7075883383656487,
          "max_score": 10,
          "description": "219/714 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.1568627450980395,
          "max_score": 10,
          "description": "203/714 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "714/714 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "714/714 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 714 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:40
score_json:
{
  "run_id": "f7f57950-4cd9-444b-9ef0-5cc5f50ae324",
  "timestamp": "2023-03-03T10:23:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-4.0-jdk7.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.105635841695547,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.972067039106145,
          "max_score": 10,
          "description": "714/716 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1145251396648046,
          "max_score": 10,
          "description": "223/716 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.164804469273744,
          "max_score": 10,
          "description": "203/716 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/716 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.6993090126819173,
          "max_score": 10,
          "description": "219/716 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.175977653631286,
          "max_score": 10,
          "description": "59/716 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:32:00.897314Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9860335195530725,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:714, total:716"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 759 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:41
score_json:
{
  "run_id": "e0b89634-1439-4483-be39-58033c3b4733",
  "timestamp": "2023-03-03T10:23:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-4.0-jdk7.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.104937517673203,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.1145251396648046,
          "max_score": 10,
          "description": "223/716 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.6853425322349898,
          "max_score": 10,
          "description": "218/716 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.178770949720671,
          "max_score": 10,
          "description": "202/716 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.972067039106145,
          "max_score": 10,
          "description": "714/716 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:32:01.799726Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/716 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "716/716 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9860335195530725,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:714, total:716"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/716 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 759 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.162011173184357,
          "max_score": 10,
          "description": "60/716 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:41
score_json:
{
  "run_id": "e5a377fc-e04a-43bd-aa32-7c7624e8ed5a",
  "timestamp": "2023-03-03T10:23:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_glassfish-4.0-jdk7.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.243865030674846,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.723926380368098,
          "max_score": 10,
          "description": "317/326 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 325 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.877300613496932,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:318, total:326"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.27607361963190186,
          "max_score": 10,
          "description": "9/326 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:33:58Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:42
score_json:
{
  "run_id": "25ea55a2-8781-4b0c-a11e-63648b19cb25",
  "timestamp": "2023-03-03T10:23:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_glassfish-4.0-jdk7.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "tag-value",
      "avg_score": 6.730061349693251,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 9.723926380368098,
          "max_score": 10,
          "description": "317/326 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.723926380368098,
          "max_score": 10,
          "description": "317/326 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "326/326 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:34:01Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.27607361963190186,
          "max_score": 10,
          "description": "9/326 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/326 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 326 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/326 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.877300613496932,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:318, total:326"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:42
score_json:
{
  "run_id": "c9cbfd1e-8f5d-4fd4-b4a8-af848ce46ed4",
  "timestamp": "2023-03-03T10:23:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-amazoncorretto.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371809606848447,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:38:04+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3217343056436273,
          "max_score": 10,
          "description": "27/166 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:42
score_json:
{
  "run_id": "f00b0bfa-30e0-4113-ba1e-e2e3a2000bdd",
  "timestamp": "2023-03-03T10:23:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-amazoncorretto.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:38:06.81249Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:42
score_json:
{
  "run_id": "5375e25d-6dfb-407e-8d82-62ad2a6063a6",
  "timestamp": "2023-03-03T10:23:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-amazoncorretto.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:38:07.865298Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:43
score_json:
{
  "run_id": "09f3c634-d672-42e6-8eee-871313439ca6",
  "timestamp": "2023-03-03T10:23:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_maven-amazoncorretto.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.019230769230769,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:40:20Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 1.153846153846154,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3, total:13"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 9.230769230769232,
          "max_score": 10,
          "description": "12/13 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have supplier names"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 12 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:43
score_json:
{
  "run_id": "476aea4c-5d84-42bd-a9fd-4d11ba4c97ba",
  "timestamp": "2023-03-03T10:23:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_maven-amazoncorretto.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "tag-value",
      "avg_score": 6.019230769230769,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:40:20Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 1.153846153846154,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3, total:13"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 9.230769230769232,
          "max_score": 10,
          "description": "12/13 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 13 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:43
score_json:
{
  "run_id": "0a3a16c5-c1d1-4732-8bf8-ae51a0cc72c2",
  "timestamp": "2023-03-03T10:23:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-8.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3714231927710845,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:43:50+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3140060240963856,
          "max_score": 10,
          "description": "27/166 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:44
score_json:
{
  "run_id": "34990a9b-d96f-4ea8-9e64-f3a8bb21ce4f",
  "timestamp": "2023-03-03T10:23:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112537202380953,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:43:53.266566Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.2983630952380953,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:44
score_json:
{
  "run_id": "469966d9-c1c1-4cfd-b4c4-3d774f9db990",
  "timestamp": "2023-03-03T10:23:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112537202380953,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:43:54.456648Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.2983630952380953,
          "max_score": 10,
          "description": "27/168 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:44
score_json:
{
  "run_id": "82ab4165-2534-48a6-ac9f-a23648a51055",
  "timestamp": "2023-03-03T10:23:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_maven-3.9.0-amazoncorretto-8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.019230769230769,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:45:20Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 9.230769230769232,
          "max_score": 10,
          "description": "12/13 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 1.153846153846154,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3, total:13"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 12 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:44
score_json:
{
  "run_id": "99de2bba-f4de-45a3-a5bf-33ee06a5a8e0",
  "timestamp": "2023-03-03T10:23:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_maven-3.9.0-amazoncorretto-8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "tag-value",
      "avg_score": 6.019230769230769,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 13 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 9.230769230769232,
          "max_score": 10,
          "description": "12/13 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have versions"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 1.153846153846154,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3, total:13"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:45:21Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:45
score_json:
{
  "run_id": "b1639a68-fe64-434c-a71b-3a62760de487",
  "timestamp": "2023-03-03T10:23:45Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-19.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371809606848447,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3217343056436273,
          "max_score": 10,
          "description": "27/166 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:48:49+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:45
score_json:
{
  "run_id": "0031dd14-bf04-4102-91ac-419282ed62cb",
  "timestamp": "2023-03-03T10:23:45Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-19.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:48:51.76554Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:45
score_json:
{
  "run_id": "bf391cdd-6b23-430a-a00b-cedf3964a336",
  "timestamp": "2023-03-03T10:23:45Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-19.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:48:52.903233Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:46
score_json:
{
  "run_id": "9ddb0e61-f656-403d-9c08-71c6d62e23bf",
  "timestamp": "2023-03-03T10:23:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_maven-3.9.0-amazoncorretto-19.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.019230769230769,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 9.230769230769232,
          "max_score": 10,
          "description": "12/13 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:50:57Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 1.153846153846154,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3, total:13"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/13 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "13/13 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 12 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/13 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:55
score_json:
{
  "run_id": "dc490879-0f1f-42ed-863b-853231d02ec3",
  "timestamp": "2023-03-03T10:23:55Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-11.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371809606848447,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3217343056436273,
          "max_score": 10,
          "description": "27/166 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:52:57+00:00"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:56
score_json:
{
  "run_id": "b077910d-5800-4aba-aa38-403dc90c105e",
  "timestamp": "2023-03-03T10:23:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-11.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:52:57.873883Z"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:56
score_json:
{
  "run_id": "a520fc86-e7c2-4b12-b2c2-a35050537ddc",
  "timestamp": "2023-03-03T10:23:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto-11.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:52:58.624733Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:59
score_json:
{
  "run_id": "ecd77ebd-47f3-4e86-92d9-b1d606a824b7",
  "timestamp": "2023-03-03T10:23:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371809606848447,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3217343056436273,
          "max_score": 10,
          "description": "27/166 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:53:58+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:23:59
score_json:
{
  "run_id": "14e71fda-e4ad-4115-a1d9-d86701089e53",
  "timestamp": "2023-03-03T10:23:59Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:53:59.51144Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:00
score_json:
{
  "run_id": "a418c0cd-a1f5-46bd-b174-2da7899d09b3",
  "timestamp": "2023-03-03T10:24:00Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9.0-amazoncorretto.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:54:00.11356Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:02
score_json:
{
  "run_id": "3be8e935-cd89-4948-a0b9-2e6dcbfa46f5",
  "timestamp": "2023-03-03T10:24:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-8.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3714231927710845,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:55:38+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3140060240963856,
          "max_score": 10,
          "description": "27/166 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:03
score_json:
{
  "run_id": "593fe152-f401-434f-9b15-0d0fd67decf6",
  "timestamp": "2023-03-03T10:24:03Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-8.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112537202380953,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.2983630952380953,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:55:39.510727Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:03
score_json:
{
  "run_id": "26295d53-bd22-4408-b93d-4074f74edd08",
  "timestamp": "2023-03-03T10:24:03Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112537202380953,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:55:40.257676Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.2983630952380953,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:06
score_json:
{
  "run_id": "82da3a4d-c1cf-456c-be10-bec57eae6a5b",
  "timestamp": "2023-03-03T10:24:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-19.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371809606848447,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3217343056436273,
          "max_score": 10,
          "description": "27/166 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:56:38+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:06
score_json:
{
  "run_id": "b7ef2562-b1ff-426d-b065-e59ec66add53",
  "timestamp": "2023-03-03T10:24:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-19.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:56:40.044304Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:06
score_json:
{
  "run_id": "a0630c4b-996a-4127-9f15-a9b2bf420334",
  "timestamp": "2023-03-03T10:24:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-19.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:56:40.82773Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:17
score_json:
{
  "run_id": "d79a79b1-2d33-461e-a453-dfed4eb24ee5",
  "timestamp": "2023-03-03T10:24:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-11.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371809606848446,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:57:51+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "166/166 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.156626506024097,
          "max_score": 10,
          "description": "97/166 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/166 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.9879518072289155,
          "max_score": 10,
          "description": "116/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3217343056436273,
          "max_score": 10,
          "description": "27/166 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:18
score_json:
{
  "run_id": "38bad055-5e0a-4040-9553-0d6748e3d170",
  "timestamp": "2023-03-03T10:24:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-11.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:57:52.991004Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:24:19
score_json:
{
  "run_id": "3942f103-f54c-43e0-9bfb-50abf699fc48",
  "timestamp": "2023-03-03T10:24:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_maven-3.9-amazoncorretto-11.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.112919016290727,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.880952380952381,
          "max_score": 10,
          "description": "166/168 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.940476190476191,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:166, total:168"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T06:57:53.74359Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/168 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/168 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "168/168 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 168 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.3059993734335842,
          "max_score": 10,
          "description": "27/168 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/168 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.904761904761905,
          "max_score": 10,
          "description": "116/168 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.226190476190476,
          "max_score": 10,
          "description": "97/168 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:30:11
score_json:
{
  "run_id": "cf2f1a8e-db66-4b1b-aa59-f5872f9cff76",
  "timestamp": "2023-03-03T10:30:11Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_pypy-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.383008394283297,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "425/425 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "425/425 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.882352941176471,
          "max_score": 10,
          "description": "175/425 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.458823529411765,
          "max_score": 10,
          "description": "317/425 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/425 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/425 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "425/425 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T07:52:16+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.976470588235294,
          "max_score": 10,
          "description": "256/425 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988235294117647,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:424, total:425"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "425/425 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 425 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.354285532724757,
          "max_score": 10,
          "description": "302/425 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:30:12
score_json:
{
  "run_id": "d4c166e9-ab0c-41cc-b4d8-af53663e481a",
  "timestamp": "2023-03-03T10:30:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_pypy-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.129367929817188,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/427 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/427 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 427 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T07:52:20.232192Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.423887587822015,
          "max_score": 10,
          "description": "317/427 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.9016393442622945,
          "max_score": 10,
          "description": "175/427 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.953161592505854,
          "max_score": 10,
          "description": "425/427 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/427 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.004683840749415,
          "max_score": 10,
          "description": "256/427 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "427/427 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "427/427 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.3274054347512685,
          "max_score": 10,
          "description": "302/427 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.976580796252927,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:425, total:427"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 10:30:12
score_json:
{
  "run_id": "b6a674bd-d681-40c1-9cbe-3fc8d6b100e2",
  "timestamp": "2023-03-03T10:30:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_pypy-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.129367929817188,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.976580796252927,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:425, total:427"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/427 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "427/427 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.953161592505854,
          "max_score": 10,
          "description": "425/427 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.9016393442622945,
          "max_score": 10,
          "description": "175/427 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "427/427 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.3274054347512685,
          "max_score": 10,
          "description": "302/427 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.004683840749415,
          "max_score": 10,
          "description": "256/427 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/427 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 427 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-01T07:52:21.702247Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.423887587822015,
          "max_score": 10,
          "description": "317/427 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/427 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:28:20
score_json:
{
  "run_id": "d8861926-699a-4fe8-8d46-aef81562393f",
  "timestamp": "2023-03-03T17:28:20Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_buildpack-deps-unstable-curl.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.243766122098022,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.681857265692175,
          "max_score": 10,
          "description": "1126/1163 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.30954428202923473,
          "max_score": 10,
          "description": "36/1163 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1162 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:28:15Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.883920894239037,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1136, total:1163"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1163/1163 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1163/1163 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:30:05
score_json:
{
  "run_id": "2fba44f2-cc1f-4a1a-b8ec-f0bbee198a06",
  "timestamp": "2023-03-03T17:30:05Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_buildpack-deps-unstable-curl.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "tag-value",
      "avg_score": 6.72785898538263,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1163/1163 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:28:20Z"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.681857265692175,
          "max_score": 10,
          "description": "1126/1163 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1163 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.883920894239037,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1136, total:1163"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1163/1163 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 9.681857265692175,
          "max_score": 10,
          "description": "1126/1163 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.30954428202923473,
          "max_score": 10,
          "description": "36/1163 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1163 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:30:28
score_json:
{
  "run_id": "8ebaa532-4176-423f-8df7-c6f26c54ed91",
  "timestamp": "2023-03-03T17:30:28Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-unstable.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.324303809317328,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "413/413 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "413/413 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 413 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/413 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.3171912832929786,
          "max_score": 10,
          "description": "276/413 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987893462469733,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:412, total:413"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "413/413 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.062953995157384,
          "max_score": 10,
          "description": "333/413 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.697336561743342,
          "max_score": 10,
          "description": "219/413 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "413/413 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.4207008836831365,
          "max_score": 10,
          "description": "317/413 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/413 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:30:25+00:00"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:30:31
score_json:
{
  "run_id": "a5affc6f-4875-45c9-90cc-79c61df088a9",
  "timestamp": "2023-03-03T17:30:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-unstable.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.07282369978163,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:30:30.861218Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.40574935795146,
          "max_score": 10,
          "description": "317/414 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.333333333333333,
          "max_score": 10,
          "description": "276/414 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 414 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987922705314009,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:413, total:414"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/414 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975845410628018,
          "max_score": 10,
          "description": "413/414 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.043478260869566,
          "max_score": 10,
          "description": "333/414 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.7101449275362315,
          "max_score": 10,
          "description": "219/414 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:30:34
score_json:
{
  "run_id": "42603832-5786-4f4e-a4e2-3616af12f7f9",
  "timestamp": "2023-03-03T17:30:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-unstable.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.07282369978163,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 414 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.333333333333333,
          "max_score": 10,
          "description": "276/414 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987922705314009,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:413, total:414"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975845410628018,
          "max_score": 10,
          "description": "413/414 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.043478260869566,
          "max_score": 10,
          "description": "333/414 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.40574935795146,
          "max_score": 10,
          "description": "317/414 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/414 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:30:33.484002Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 4.7101449275362315,
          "max_score": 10,
          "description": "219/414 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:38:40
score_json:
{
  "run_id": "d1d2d70b-2486-4fa1-b0d0-8533a018b5c3",
  "timestamp": "2023-03-03T17:38:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_buildpack-deps-unstable.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "json",
      "avg_score": 6.246836295099622,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.14539579967689822,
          "max_score": 10,
          "description": "54/3714 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "3714/3714 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:38:32Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 3713 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.939418416801292,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3669, total:3714"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "3714/3714 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.85191168551427,
          "max_score": 10,
          "description": "3659/3714 have versions"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:46:31
score_json:
{
  "run_id": "38e960eb-ce07-4c21-bf86-b41726f74de4",
  "timestamp": "2023-03-03T17:46:31Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "bom-v0.4.1_buildpack-deps-unstable.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.3",
      "file_format": "tag-value",
      "avg_score": 6.739431879375336,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "3714/3714 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.85191168551427,
          "max_score": 10,
          "description": "3659/3714 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "3714/3714 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.3 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 9.85191168551427,
          "max_score": 10,
          "description": "3659/3714 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 3714 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:38:40Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.939418416801292,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:3669, total:3714"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0.14539579967689822,
          "max_score": 10,
          "description": "54/3714 have checksums"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/3714 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:46:34
score_json:
{
  "run_id": "6f59eac2-61eb-440d-a1aa-558f100d93b5",
  "timestamp": "2023-03-03T17:46:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-sid-scm.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.316880171338253,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/165 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "165/165 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 165 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:46:34+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.454545454545455,
          "max_score": 10,
          "description": "156/165 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "165/165 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/165 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.337603426765065,
          "max_score": 10,
          "description": "150/165 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "165/165 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.7575757575757573,
          "max_score": 10,
          "description": "103/165 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "165/165 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.8181818181818183,
          "max_score": 10,
          "description": "135/165 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96969696969697,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:164, total:165"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:46:36
score_json:
{
  "run_id": "0bdc6697-0d10-442f-a287-36cc59e87fb8",
  "timestamp": "2023-03-03T17:46:36Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-sid-scm.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.063387998542116,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.93975903614458,
          "max_score": 10,
          "description": "165/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.8674698795180722,
          "max_score": 10,
          "description": "135/166 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:46:36.494761Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.7951807228915664,
          "max_score": 10,
          "description": "103/166 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.397590361445783,
          "max_score": 10,
          "description": "156/166 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.297880452770033,
          "max_score": 10,
          "description": "150/166 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/166 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 17:46:39
score_json:
{
  "run_id": "171cdf22-6393-414f-8489-0a71f25edf84",
  "timestamp": "2023-03-03T17:46:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_buildpack-deps-sid-scm.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.063387998542116,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.7951807228915664,
          "max_score": 10,
          "description": "103/166 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.297880452770033,
          "max_score": 10,
          "description": "150/166 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.8674698795180722,
          "max_score": 10,
          "description": "135/166 components have deprecated licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.397590361445783,
          "max_score": 10,
          "description": "156/166 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/166 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have names"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 166 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T17:46:38.70542Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96987951807229,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:165, total:166"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/166 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.93975903614458,
          "max_score": 10,
          "description": "165/166 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "166/166 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 18:38:35
score_json:
{
  "run_id": "78b2f443-9742-4f92-8eb6-a9f4b9512cc5",
  "timestamp": "2023-03-03T18:38:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_postgres-bullseye.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1402749921248825,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/151 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/151 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.867549668874172,
          "max_score": 10,
          "description": "149/151 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 151 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.609271523178808,
          "max_score": 10,
          "description": "130/151 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.646559445146667,
          "max_score": 10,
          "description": "129/151 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "151/151 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/151 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "151/151 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T18:38:34.482414Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.119205298013245,
          "max_score": 10,
          "description": "119/151 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.933774834437086,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:149, total:151"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.629139072847682,
          "max_score": 10,
          "description": "66/151 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 18:41:29
score_json:
{
  "run_id": "97c40704-f196-4025-a2b0-a88897264d4e",
  "timestamp": "2023-03-03T18:41:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_java-8u111-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.439189189189189,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/37 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.216216216216216,
          "max_score": 10,
          "description": "14/37 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.864864864864865,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:36, total:37"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.027027027027027,
          "max_score": 10,
          "description": "11/37 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.72972972972973,
          "max_score": 10,
          "description": "36/37 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T18:41:28.388929Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.45945945945946,
          "max_score": 10,
          "description": "35/37 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.486486486486487,
          "max_score": 10,
          "description": "24/37 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 37 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 18:43:46
score_json:
{
  "run_id": "4761d9a9-2bc3-4fb5-9cd0-bf82be4b75ab",
  "timestamp": "2023-03-03T18:43:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.0.0.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.510968117689008,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "438/438 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.497716894977169,
          "max_score": 10,
          "description": "241/438 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "438/438 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/438 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988584474885845,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:437, total:438"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "438/438 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "438/438 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T18:43:40+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.123287671232877,
          "max_score": 10,
          "description": "312/438 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/438 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.801554134602077,
          "max_score": 10,
          "description": "303/438 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 438 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.808219178082192,
          "max_score": 10,
          "description": "96/438 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 19:11:11
score_json:
{
  "run_id": "598ffccd-fbab-47ef-b361-0c453adf187d",
  "timestamp": "2023-03-03T19:11:11Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_django-1.10.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.19200057477983,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T19:11:11.124053Z"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 188 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.340011495596602,
          "max_score": 10,
          "description": "143/188 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/188 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.893617021276595,
          "max_score": 10,
          "description": "186/188 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.712765957446809,
          "max_score": 10,
          "description": "145/188 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.765957446808511,
          "max_score": 10,
          "description": "136/188 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.946808510638298,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:186, total:188"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.180851063829787,
          "max_score": 10,
          "description": "53/188 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 19:22:02
score_json:
{
  "run_id": "3699af77-08a7-4db4-b36c-6ef040a040a6",
  "timestamp": "2023-03-03T19:22:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_swarm-1.2.6-rc2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T19:22:02.376802Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 20:42:05
score_json:
{
  "run_id": "f6cc6f43-fb8e-4514-85b4-b10f34ef63c6",
  "timestamp": "2023-03-03T20:42:05Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_java-8u111-jre-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.7285714285714295,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "35/35 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T20:42:04+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.142857142857143,
          "max_score": 10,
          "description": "10/35 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/35 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.857142857142857,
          "max_score": 10,
          "description": "24/35 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "35/35 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 35 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "35/35 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.714285714285714,
          "max_score": 10,
          "description": "34/35 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/35 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6,
          "max_score": 10,
          "description": "14/35 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.857142857142857,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:34, total:35"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "35/35 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 20:43:56
score_json:
{
  "run_id": "c32e3e12-bc55-4ee4-818c-1092bcd8a82b",
  "timestamp": "2023-03-03T20:43:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-onbuild.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.201390415483857,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.950495049504951,
          "max_score": 10,
          "description": "402/404 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/404 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.488204349281081,
          "max_score": 10,
          "description": "270/404 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/404 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.648514851485149,
          "max_score": 10,
          "description": "95/404 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "404/404 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 404 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/404 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "404/404 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T20:43:54.255659Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.905940594059405,
          "max_score": 10,
          "description": "279/404 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.0594059405940595,
          "max_score": 10,
          "description": "240/404 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.975247524752476,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:402, total:404"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 20:44:50
score_json:
{
  "run_id": "f6ebfa73-fc83-4807-b12b-48e807850cda",
  "timestamp": "2023-03-03T20:44:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-4.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.505308837667708,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/434 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "434/434 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.119815668202765,
          "max_score": 10,
          "description": "309/434 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.470046082949309,
          "max_score": 10,
          "description": "240/434 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "434/434 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "434/434 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 434 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T20:44:47+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.76285878100394,
          "max_score": 10,
          "description": "299/434 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9884792626728105,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:433, total:434"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/434 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.764976958525346,
          "max_score": 10,
          "description": "97/434 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "434/434 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 20:52:54
score_json:
{
  "run_id": "c529b87a-188f-46bc-a68d-83ba16252e70",
  "timestamp": "2023-03-03T20:52:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.60.1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.129600584547015,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 504 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/488 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.840163934426229,
          "max_score": 10,
          "description": "203/488 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.959016393442624,
          "max_score": 10,
          "description": "486/488 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.692622950819672,
          "max_score": 10,
          "description": "229/488 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/488 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "488/488 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.821519887661638,
          "max_score": 10,
          "description": "221/488 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.979508196721312,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:486, total:488"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/488 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "488/488 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T20:52:51.661853Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.299180327868852,
          "max_score": 10,
          "description": "83/488 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 21:21:42
score_json:
{
  "run_id": "6831f528-50fa-40b1-a934-7ebe57ce7187",
  "timestamp": "2023-03-03T21:21:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-3.3-onbuild.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.438812960786299,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.730804670271452,
          "max_score": 10,
          "description": "428/572 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9825174825174825,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:570, total:572"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965034965034965,
          "max_score": 10,
          "description": "570/572 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T21:21:39.447841Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.961538461538462,
          "max_score": 10,
          "description": "231/572 components have deprecated licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.622377622377622,
          "max_score": 10,
          "description": "436/572 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 572 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/572 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.513986013986013,
          "max_score": 10,
          "description": "85/572 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 21:28:54
score_json:
{
  "run_id": "d716e65b-e8de-48fa-bf90-f970fa552da5",
  "timestamp": "2023-03-03T21:28:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_celery-4.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.285497435897436,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.2299487179487185,
          "max_score": 10,
          "description": "100/125 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.92,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:123, total:125"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.76,
          "max_score": 10,
          "description": "28/125 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "125/125 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.84,
          "max_score": 10,
          "description": "123/125 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 125 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T21:28:53.126612Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.16,
          "max_score": 10,
          "description": "102/125 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/125 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8000000000000003,
          "max_score": 10,
          "description": "90/125 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/125 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 23:05:28
score_json:
{
  "run_id": "3a5b1f2f-2dcf-42e9-9d0c-5511f9dac4d0",
  "timestamp": "2023-03-03T23:05:28Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_jenkins-2.46.2-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.1466666666666665,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.2,
          "max_score": 10,
          "description": "72/225 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.844444444444445,
          "max_score": 10,
          "description": "26/225 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/225 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.955555555555556,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:223, total:225"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/225 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "25/225 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.911111111111111,
          "max_score": 10,
          "description": "223/225 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T23:05:27.870026Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.1333333333333333,
          "max_score": 10,
          "description": "49/225 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 241 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/225 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "225/225 have unique ID's"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 23:22:12
score_json:
{
  "run_id": "a71023ca-b346-43bf-b0cd-1dd8fe7fd383",
  "timestamp": "2023-03-03T23:22:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.351749528815856,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/735 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/735 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "735/735 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.170068027210885,
          "max_score": 10,
          "description": "61/735 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 735 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.006802721088435,
          "max_score": 10,
          "description": "221/735 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "735/735 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.278911564625851,
          "max_score": 10,
          "description": "200/735 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "735/735 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "735/735 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T23:22:08+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.5860109844803714,
          "max_score": 10,
          "description": "216/735 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.993197278911564,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:734, total:735"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 23:22:16
score_json:
{
  "run_id": "1d4cf322-f232-4d61-88e8-1216f2c7d2af",
  "timestamp": "2023-03-03T23:22:16Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_glassfish-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.099742554483058,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/737 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "737/737 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.972862957937584,
          "max_score": 10,
          "description": "735/737 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 800 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/737 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T23:22:15.756726Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.9986431478968796,
          "max_score": 10,
          "description": "221/737 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.172320217096336,
          "max_score": 10,
          "description": "61/737 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "737/737 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.578297494003057,
          "max_score": 10,
          "description": "216/737 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.28629579375848,
          "max_score": 10,
          "description": "200/737 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.986431478968792,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:735, total:737"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/737 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 23:35:47
score_json:
{
  "run_id": "351a9807-8d7c-44ce-a3a9-ada29f59697f",
  "timestamp": "2023-03-03T23:35:47Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_django-1.10.4.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.189341000311745,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8191489361702127,
          "max_score": 10,
          "description": "135/188 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 188 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.712765957446809,
          "max_score": 10,
          "description": "145/188 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.946808510638298,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:186, total:188"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.893617021276595,
          "max_score": 10,
          "description": "186/188 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T23:35:46.106671Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/188 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.127659574468085,
          "max_score": 10,
          "description": "54/188 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.2868200062349,
          "max_score": 10,
          "description": "142/188 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-03 23:52:52
score_json:
{
  "run_id": "5bfe4f4f-6770-4be1-905e-237d9acafb3b",
  "timestamp": "2023-03-03T23:52:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_swarm-1.2.7.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-03T23:52:52.223958Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        }
      ]
    }
  ]
}


