# scores

updated_at: 2023-03-07 19:02:43
score_json:
{
  "run_id": "c6001a1f-8e56-40e1-b8c3-9adc278666f9",
  "timestamp": "2023-03-07T19:02:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mysql-8.0.32-debian.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.396924247353918,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "141/141 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.886524822695035,
          "max_score": 10,
          "description": "58/141 components have restricted licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.626428209489702,
          "max_score": 10,
          "description": "118/141 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.929078014184397,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:139, total:141"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "141/141 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:02:41+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.368794326241135,
          "max_score": 10,
          "description": "118/141 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 141 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/141 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1985815602836882,
          "max_score": 10,
          "description": "110/141 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/141 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.929078014184396,
          "max_score": 10,
          "description": "140/141 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "141/141 have unique ID's"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:18:58
score_json:
{
  "run_id": "af46fe80-a81f-4f37-9398-ea9c94670dc4",
  "timestamp": "2023-03-07T19:18:58Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_cassandra-4.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.120110206228796,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.533632286995515,
          "max_score": 10,
          "description": "55/223 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "223/223 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.932735426008969,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:220, total:223"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.84304932735426,
          "max_score": 10,
          "description": "115/223 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.865470852017937,
          "max_score": 10,
          "description": "220/223 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/223 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/223 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.532248967625239,
          "max_score": 10,
          "description": "125/223 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/223 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:18:56.956108Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.695067264573991,
          "max_score": 10,
          "description": "127/223 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "223/223 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 225 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:02
score_json:
{
  "run_id": "454b20b7-0587-4c47-b392-e2efb9b3bb18",
  "timestamp": "2023-03-07T19:19:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mysql-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.186619718309859,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "142/142 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:01.623499Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.894366197183099,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:139, total:142"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/142 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "142/142 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 142 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/142 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/142 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 2.323943661971831,
          "max_score": 10,
          "description": "109/142 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.788732394366198,
          "max_score": 10,
          "description": "139/142 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.577464788732394,
          "max_score": 10,
          "description": "136/142 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.2183098591549295,
          "max_score": 10,
          "description": "42/142 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.929577464788732,
          "max_score": 10,
          "description": "1/142 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:05
score_json:
{
  "run_id": "cdabd142-9edb-4ce2-b5d2-75c8613c85a8",
  "timestamp": "2023-03-07T19:19:05Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mysql-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.186619718309859,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.894366197183099,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:139, total:142"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/142 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.2183098591549295,
          "max_score": 10,
          "description": "42/142 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/142 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "142/142 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "142/142 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 142 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:04.688209Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.929577464788732,
          "max_score": 10,
          "description": "1/142 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.788732394366198,
          "max_score": 10,
          "description": "139/142 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.577464788732394,
          "max_score": 10,
          "description": "136/142 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/142 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 2.323943661971831,
          "max_score": 10,
          "description": "109/142 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:08
score_json:
{
  "run_id": "2446a257-2ce2-47d2-99a7-e1a8443b9ab3",
  "timestamp": "2023-03-07T19:19:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.512328075242834,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 437 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:07+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.807202237122143,
          "max_score": 10,
          "description": "302/437 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988558352402746,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:436, total:437"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.826086956521739,
          "max_score": 10,
          "description": "95/437 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.508009153318078,
          "max_score": 10,
          "description": "240/437 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.116704805491992,
          "max_score": 10,
          "description": "311/437 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "437/437 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/437 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/437 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:11
score_json:
{
  "run_id": "24a8d4f9-2e39-4afd-a2a4-0f565c90c036",
  "timestamp": "2023-03-07T19:19:11Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.258227170513618,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.954441913439636,
          "max_score": 10,
          "description": "437/439 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:11.183923Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.084282460136674,
          "max_score": 10,
          "description": "311/439 have licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 439 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.779577578837259,
          "max_score": 10,
          "description": "302/439 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977220956719818,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:437, total:439"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/439 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.533029612756264,
          "max_score": 10,
          "description": "240/439 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.835990888382688,
          "max_score": 10,
          "description": "95/439 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:14
score_json:
{
  "run_id": "66adec2f-6830-4b06-9935-f66276e6cd3a",
  "timestamp": "2023-03-07T19:19:14Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-5.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.258227170513616,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.533029612756264,
          "max_score": 10,
          "description": "240/439 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.779577578837259,
          "max_score": 10,
          "description": "302/439 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.835990888382688,
          "max_score": 10,
          "description": "95/439 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.954441913439636,
          "max_score": 10,
          "description": "437/439 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 439 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:14.194683Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.084282460136674,
          "max_score": 10,
          "description": "311/439 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977220956719818,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:437, total:439"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/439 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:17
score_json:
{
  "run_id": "4e967a4b-f010-44b8-b85f-31ced79c30e9",
  "timestamp": "2023-03-07T19:19:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-latest.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.512328075242836,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.508009153318078,
          "max_score": 10,
          "description": "240/437 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/437 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 437 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.807202237122143,
          "max_score": 10,
          "description": "302/437 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988558352402746,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:436, total:437"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.116704805491992,
          "max_score": 10,
          "description": "311/437 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "437/437 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:17+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/437 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "437/437 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.826086956521739,
          "max_score": 10,
          "description": "95/437 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:19:20
score_json:
{
  "run_id": "d0f38e45-4744-429f-849a-7b3b6e92d6ed",
  "timestamp": "2023-03-07T19:19:20Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.258227170513616,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 439 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.084282460136674,
          "max_score": 10,
          "description": "311/439 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977220956719818,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:437, total:439"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.954441913439636,
          "max_score": 10,
          "description": "437/439 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "439/439 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:19:20.271517Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.779577578837259,
          "max_score": 10,
          "description": "302/439 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.533029612756264,
          "max_score": 10,
          "description": "240/439 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/439 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.835990888382688,
          "max_score": 10,
          "description": "95/439 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/439 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:21:32
score_json:
{
  "run_id": "3903482b-6c41-4682-9f3c-bcb8ecc15c3d",
  "timestamp": "2023-03-07T19:21:32Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_tomcat-9.0.72-jdk8-corretto-al2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.383483115468411,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 153 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/153 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/153 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "153/153 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5816993464052285,
          "max_score": 10,
          "description": "116/153 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4605119825708062,
          "max_score": 10,
          "description": "29/153 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "153/153 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/153 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "153/153 have names"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.6601307189542482,
          "max_score": 10,
          "description": "97/153 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "153/153 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:21:29+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.967320261437909,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:152, total:153"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:23:37
score_json:
{
  "run_id": "10769d36-e6c0-4fd2-9c09-7e21a103b626",
  "timestamp": "2023-03-07T19:23:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_tomcat-9.0.72-jdk8-corretto-al2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.123696236559139,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.870967741935484,
          "max_score": 10,
          "description": "153/155 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "155/155 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 3.741935483870968,
          "max_score": 10,
          "description": "97/155 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.483870967741936,
          "max_score": 10,
          "description": "116/155 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:23:36.52237Z"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "155/155 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 156 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/155 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/155 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4416666666666667,
          "max_score": 10,
          "description": "29/155 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/155 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.935483870967742,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:153, total:155"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/155 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:26:04
score_json:
{
  "run_id": "b37eb3d2-9dd8-4ff5-b15b-7c8cdddea346",
  "timestamp": "2023-03-07T19:26:04Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.222454287076571,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.83435582822086,
          "max_score": 10,
          "description": "81/4890 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4890 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.922290388548058,
          "max_score": 10,
          "description": "38/4890 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4890/4890 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4890 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.997955010224949,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4888, total:4890"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "4890/4890 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4890/4890 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.997955010224949,
          "max_score": 10,
          "description": "4889/4890 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:25:53+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.865030674846626,
          "max_score": 10,
          "description": "4824/4890 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4890 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.831498829466005,
          "max_score": 10,
          "description": "4821/4890 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:28:12
score_json:
{
  "run_id": "894c647a-10c5-4e80-8a97-0b622f5f692f",
  "timestamp": "2023-03-07T19:28:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-5.36.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.971798577941868,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:28:09.719083Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.92232215862633,
          "max_score": 10,
          "description": "38/4892 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4892/4892 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4892 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.99386753883892,
          "max_score": 10,
          "description": "4889/4892 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.860997547015536,
          "max_score": 10,
          "description": "4824/4892 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/4892 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.827426996286256,
          "max_score": 10,
          "description": "4821/4892 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.834423548650857,
          "max_score": 10,
          "description": "81/4892 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4892 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4892/4892 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4892 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.99693376941946,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4889, total:4892"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:30:19
score_json:
{
  "run_id": "e93e0fbd-7cec-404c-8a47-257517a17838",
  "timestamp": "2023-03-07T19:30:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gcc-9.5-buster.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.369579796689772,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:30:16+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.222222222222222,
          "max_score": 10,
          "description": "299/414 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.1814510062591905,
          "max_score": 10,
          "description": "283/414 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.987922705314009,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:413, total:414"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.1352657004830915,
          "max_score": 10,
          "description": "160/414 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/414 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.864734299516908,
          "max_score": 10,
          "description": "254/414 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "414/414 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 414 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "414/414 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:32:26
score_json:
{
  "run_id": "af50a023-0407-478a-9ecb-3586f1c693da",
  "timestamp": "2023-03-07T19:32:26Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gcc-9.5-buster.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.117994154918321,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/415 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "415/415 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:32:24.559252Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.8795180722891565,
          "max_score": 10,
          "description": "254/415 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.975903614457831,
          "max_score": 10,
          "description": "414/415 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.2048192771084345,
          "max_score": 10,
          "description": "299/415 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/415 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.144578313253012,
          "max_score": 10,
          "description": "160/415 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "415/415 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9879518072289155,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:414, total:415"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 415 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.1671120140290965,
          "max_score": 10,
          "description": "283/415 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/415 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:39:07
score_json:
{
  "run_id": "b618ac5e-c268-484a-9c2b-42d8b693d819",
  "timestamp": "2023-03-07T19:39:07Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.1.3.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.383193134720623,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.037037037037037,
          "max_score": 10,
          "description": "161/270 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.237936768486526,
          "max_score": 10,
          "description": "182/270 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "270/270 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.444444444444445,
          "max_score": 10,
          "description": "96/270 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 270 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:39:04+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.962962962962963,
          "max_score": 10,
          "description": "188/270 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981481481481482,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:269, total:270"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:39:10
score_json:
{
  "run_id": "2c104b31-3194-4b87-b175-875bf7540624",
  "timestamp": "2023-03-07T19:39:10Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.1.3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.130714704192276,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "271/271 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.215770098605653,
          "max_score": 10,
          "description": "182/271 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.059040590405904,
          "max_score": 10,
          "description": "161/271 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/271 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.963099630996311,
          "max_score": 10,
          "description": "270/271 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/271 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 271 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.937269372693727,
          "max_score": 10,
          "description": "188/271 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/271 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9815498154981555,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:270, total:271"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "271/271 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:39:09.908068Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.4575645756457565,
          "max_score": 10,
          "description": "96/271 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:41:15
score_json:
{
  "run_id": "8f9e9544-9425-49d6-bac8-b84c24f91ebd",
  "timestamp": "2023-03-07T19:41:15Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nginx-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.189170334807312,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.930555555555555,
          "max_score": 10,
          "description": "143/144 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.916666666666666,
          "max_score": 10,
          "description": "114/144 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/144 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/144 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.388888888888888,
          "max_score": 10,
          "description": "52/144 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/144 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "144/144 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:41:15.009249Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.318128918368478,
          "max_score": 10,
          "description": "111/144 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.263888888888889,
          "max_score": 10,
          "description": "97/144 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 144 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.965277777777778,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:143, total:144"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "144/144 have names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:45:29
score_json:
{
  "run_id": "850d96af-7a70-4654-822b-b88874cf92c3",
  "timestamp": "2023-03-07T19:45:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rocket.chat-5.3.5.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.948378624099213,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/3000 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.993333333333332,
          "max_score": 10,
          "description": "2998/3000 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.74,
          "max_score": 10,
          "description": "78/3000 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "3000/3000 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.65090581531758,
          "max_score": 10,
          "description": "2905/3000 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "3000/3000 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/3000 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.996666666666666,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:2998, total:3000"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/3000 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.9,
          "max_score": 10,
          "description": "30/3000 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 3000 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:45:22.796765Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.686666666666667,
          "max_score": 10,
          "description": "2906/3000 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:53:39
score_json:
{
  "run_id": "0c2f396e-68af-4d22-94c7-f640c7b7391e",
  "timestamp": "2023-03-07T19:53:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haskell-9.2.7-slim-buster.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.410006777332145,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "176/176 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 176 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "176/176 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "176/176 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.069453728461079,
          "max_score": 10,
          "description": "131/176 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/176 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5568181818181825,
          "max_score": 10,
          "description": "133/176 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.0681818181818183,
          "max_score": 10,
          "description": "122/176 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "176/176 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:53:37+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/176 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.971590909090909,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:175, total:176"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.534090909090909,
          "max_score": 10,
          "description": "61/176 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:53:42
score_json:
{
  "run_id": "a7f5acda-911d-427f-94e1-23774c4b787a",
  "timestamp": "2023-03-07T19:53:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_haskell-9.2.7-slim-buster.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1561330609311655,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "177/177 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 177 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.1073446327683616,
          "max_score": 10,
          "description": "122/177 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/177 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/177 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.943502824858758,
          "max_score": 10,
          "description": "176/177 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:53:41.616809Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/177 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.55367231638418,
          "max_score": 10,
          "description": "61/177 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.032265738397344,
          "max_score": 10,
          "description": "131/177 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "177/177 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.5141242937853105,
          "max_score": 10,
          "description": "133/177 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.971751412429379,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:176, total:177"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:55:48
score_json:
{
  "run_id": "1fa11b82-0f98-4023-9455-293560cd0759",
  "timestamp": "2023-03-07T19:55:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_websphere-liberty-23.0.0.1-kernel-java17-openj9.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371798512409019,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "226/226 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "226/226 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/226 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.619469026548672,
          "max_score": 10,
          "description": "99/226 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977876106194691,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:226"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:55:46+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.051014495968021,
          "max_score": 10,
          "description": "108/226 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "226/226 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.964601769911504,
          "max_score": 10,
          "description": "46/226 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "226/226 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 226 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.823008849557522,
          "max_score": 10,
          "description": "109/226 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/226 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 19:57:52
score_json:
{
  "run_id": "9c7785ad-a55b-4bbf-975a-5adac26738a3",
  "timestamp": "2023-03-07T19:57:52Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_websphere-liberty-23.0.0.1-kernel-java17-openj9.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.111901944261483,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "228/228 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T19:57:51.874434Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.9485652010191328,
          "max_score": 10,
          "description": "108/228 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.657894736842105,
          "max_score": 10,
          "description": "99/228 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.780701754385965,
          "max_score": 10,
          "description": "109/228 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.956140350877193,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:226, total:228"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.982456140350878,
          "max_score": 10,
          "description": "46/228 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.912280701754385,
          "max_score": 10,
          "description": "226/228 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 228 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/228 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/228 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "228/228 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/228 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:04:02
score_json:
{
  "run_id": "99df1d8d-3395-468c-82a0-780d6ec91eb2",
  "timestamp": "2023-03-07T20:04:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.1.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.137816585888191,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/270 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.592592592592592,
          "max_score": 10,
          "description": "92/270 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.925925925925926,
          "max_score": 10,
          "description": "187/270 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.256331717763832,
          "max_score": 10,
          "description": "181/270 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981481481481482,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:269, total:270"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 270 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/270 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:04:00.157422Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.037037037037037,
          "max_score": 10,
          "description": "161/270 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "270/270 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.962962962962964,
          "max_score": 10,
          "description": "269/270 have versions"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:06:08
score_json:
{
  "run_id": "b19537c0-d2d0-49c4-9102-10bc5eaf11d7",
  "timestamp": "2023-03-07T20:06:08Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchdb-2.3.1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.4287293250063176,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/158 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:06:05+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.354430379746836,
          "max_score": 10,
          "description": "132/158 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.968354430379747,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:157, total:158"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "158/158 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.391042196328868,
          "max_score": 10,
          "description": "126/158 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "158/158 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/158 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "158/158 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "158/158 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 158 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.7848101265822782,
          "max_score": 10,
          "description": "114/158 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.075949367088608,
          "max_score": 10,
          "description": "62/158 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:08:12
score_json:
{
  "run_id": "71906ce0-e590-4704-b363-aaebcfa73f38",
  "timestamp": "2023-03-07T20:08:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-fpm-alpine3.17.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.983796296296298,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "36/36 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 36 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.537037037037038,
          "max_score": 10,
          "description": "35/36 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.111111111111112,
          "max_score": 10,
          "description": "14/36 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/36 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "36/36 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "36/36 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.722222222222221,
          "max_score": 10,
          "description": "35/36 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/36 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.861111111111111,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:35, total:36"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "36/36 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:08:11+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.444444444444445,
          "max_score": 10,
          "description": "2/36 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:10:17
score_json:
{
  "run_id": "a69a316c-e63a-46ba-a453-73538f3e79ba",
  "timestamp": "2023-03-07T20:10:17Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-fpm-alpine3.17.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.700450450450449,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.216216216216216,
          "max_score": 10,
          "description": "14/37 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.72972972972973,
          "max_score": 10,
          "description": "36/37 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 37 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.27927927927928,
          "max_score": 10,
          "description": "35/37 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.864864864864865,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:36, total:37"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:10:16.206244Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/37 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/37 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.45945945945946,
          "max_score": 10,
          "description": "2/37 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "37/37 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.45945945945946,
          "max_score": 10,
          "description": "35/37 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:12:23
score_json:
{
  "run_id": "4155543a-c2a4-4591-84c7-b9002cb8eba2",
  "timestamp": "2023-03-07T20:12:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_iojs-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.438812960786299,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/572 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/572 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "572/572 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.965034965034965,
          "max_score": 10,
          "description": "570/572 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 572 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:12:20.568158Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.730804670271452,
          "max_score": 10,
          "description": "428/572 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.622377622377622,
          "max_score": 10,
          "description": "436/572 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9825174825174825,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:570, total:572"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.513986013986013,
          "max_score": 10,
          "description": "85/572 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.961538461538462,
          "max_score": 10,
          "description": "231/572 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:16:30
score_json:
{
  "run_id": "d78d7e15-0ccc-489c-b96f-cec4532d5385",
  "timestamp": "2023-03-07T20:16:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_mageia-8.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.131022135416667,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/256 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.9609375,
          "max_score": 10,
          "description": "1/256 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.8828125,
          "max_score": 10,
          "description": "253/256 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "256/256 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 256 relationships "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.8828125,
          "max_score": 10,
          "description": "253/256 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/256 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.4453125,
          "max_score": 10,
          "description": "219/256 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "256/256 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:16:28.897803Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9609375,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:254, total:256"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/256 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.4876302083333333,
          "max_score": 10,
          "description": "42/256 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:18:35
score_json:
{
  "run_id": "6439e5e9-e072-42c6-b461-a97f62cf1d76",
  "timestamp": "2023-03-07T20:18:35Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_piwik-fpm-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.575842696629214,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 89 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.8876404494382015,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:87, total:89"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/89 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "89/89 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.887640449438202,
          "max_score": 10,
          "description": "88/89 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.056179775280899,
          "max_score": 10,
          "description": "45/89 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.157303370786517,
          "max_score": 10,
          "description": "38/89 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.98876404494382,
          "max_score": 10,
          "description": "9/89 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "89/89 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:18:34+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/89 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.539325842696629,
          "max_score": 10,
          "description": "13/89 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "89/89 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:20:40
score_json:
{
  "run_id": "274bdc71-d627-427a-b425-60b643c76977",
  "timestamp": "2023-03-07T20:20:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_node-lts-bullseye-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.76350786693934,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/336 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "336/336 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.553571428571429,
          "max_score": 10,
          "description": "321/336 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/336 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 336 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/336 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.168966862596319,
          "max_score": 10,
          "description": "321/336 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.648809523809524,
          "max_score": 10,
          "description": "79/336 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.988095238095239,
          "max_score": 10,
          "description": "34/336 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "336/336 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.94047619047619,
          "max_score": 10,
          "description": "334/336 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:20:38.499568Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970238095238095,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:334, total:336"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:22:46
score_json:
{
  "run_id": "253dec0f-4d1c-46ed-9f3c-1232533474e9",
  "timestamp": "2023-03-07T20:22:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_notary-signer-0.7.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.432692307692307,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "52/52 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 52 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.692307692307692,
          "max_score": 10,
          "description": "14/52 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.8076923076923075,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:50, total:52"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "52/52 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.807692307692307,
          "max_score": 10,
          "description": "51/52 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "52/52 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.653846153846153,
          "max_score": 10,
          "description": "7/52 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/52 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/52 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:22:45+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/52 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.6923076923076925,
          "max_score": 10,
          "description": "14/52 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:24:50
score_json:
{
  "run_id": "0c186028-0242-4b14-afe9-e111cf53913b",
  "timestamp": "2023-03-07T20:24:50Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_notary-signer-0.7.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.169811320754716,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.641509433962264,
          "max_score": 10,
          "description": "14/53 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.641509433962264,
          "max_score": 10,
          "description": "14/53 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/53 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.622641509433961,
          "max_score": 10,
          "description": "51/53 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.679245283018869,
          "max_score": 10,
          "description": "7/53 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "53/53 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 53 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/53 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "53/53 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:24:50.284072Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/53 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.811320754716981,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:51, total:53"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/53 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:26:56
score_json:
{
  "run_id": "1fa9b822-00d6-4ab3-b4ad-3a9c9ba2ac5f",
  "timestamp": "2023-03-07T20:26:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_lightstreamer-7.3-jdk8-temurin.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1049662507494515,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "234/234 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 234 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/234 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.435897435897436,
          "max_score": 10,
          "description": "60/234 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/234 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "234/234 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.914529914529915,
          "max_score": 10,
          "description": "232/234 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/234 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.2360771517411635,
          "max_score": 10,
          "description": "123/234 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.213675213675214,
          "max_score": 10,
          "description": "112/234 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957264957264957,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:232, total:234"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:26:54.477069Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.3418803418803416,
          "max_score": 10,
          "description": "125/234 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:29:02
score_json:
{
  "run_id": "bca8944b-edb1-4a1d-8bcf-23a6308bbdf9",
  "timestamp": "2023-03-07T20:29:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_sonarqube-latest.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.046812366912309,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.855534709193245,
          "max_score": 10,
          "description": "61/533 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "533/533 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:28:59.86229Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/533 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.823639774859287,
          "max_score": 10,
          "description": "116/533 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "533/533 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.401500938086304,
          "max_score": 10,
          "description": "128/533 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.981238273921201,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:531, total:533"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/533 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.962476547842401,
          "max_score": 10,
          "description": "531/533 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 533 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.9118570943437336,
          "max_score": 10,
          "description": "126/533 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/533 have supplier names"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:33:14
score_json:
{
  "run_id": "3809c4e5-0983-4372-94cd-14cabfc9f9e5",
  "timestamp": "2023-03-07T20:33:14Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_cassandra-latest.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.117476210478164,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.432857542896615,
          "max_score": 10,
          "description": "125/228 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.956140350877193,
          "max_score": 10,
          "description": "115/228 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "228/228 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "228/228 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/228 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.934210526315789,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:228"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.868421052631579,
          "max_score": 10,
          "description": "225/228 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:33:12.522947Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/228 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/228 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 230 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.570175438596491,
          "max_score": 10,
          "description": "127/228 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.587719298245615,
          "max_score": 10,
          "description": "55/228 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:35:19
score_json:
{
  "run_id": "14721d91-e574-4be6-8d42-338dc01e8b6e",
  "timestamp": "2023-03-07T20:35:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rethinkdb-2-bullseye-slim.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.184662059683933,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "136/136 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.963235294117647,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:135, total:136"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.882352941176471,
          "max_score": 10,
          "description": "56/136 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/136 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "136/136 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.926470588235293,
          "max_score": 10,
          "description": "135/136 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 136 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:35:17.873039Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "119/136 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/136 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.9653000172080795,
          "max_score": 10,
          "description": "117/136 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.2058823529411766,
          "max_score": 10,
          "description": "106/136 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/136 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:37:24
score_json:
{
  "run_id": "661e49d0-c647-4c39-861c-ba1c696e8ae5",
  "timestamp": "2023-03-07T20:37:24Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_r-base-4.0.5.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.138905960436269,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/268 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "268/268 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:37:23.070517Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/268 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "268/268 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.96268656716418,
          "max_score": 10,
          "description": "267/268 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 268 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/268 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.222149059471671,
          "max_score": 10,
          "description": "179/268 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.604477611940299,
          "max_score": 10,
          "description": "91/268 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.104477611940299,
          "max_score": 10,
          "description": "158/268 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.98134328358209,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:267, total:268"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.902985074626866,
          "max_score": 10,
          "description": "185/268 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:39:34
score_json:
{
  "run_id": "77b89a90-d7bc-493b-a907-988d4f62e157",
  "timestamp": "2023-03-07T20:39:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_aerospike-ee-6.2.0.3_1.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.459703158945151,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/128 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "128/128 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.28125,
          "max_score": 10,
          "description": "106/128 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/128 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9609375,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:127, total:128"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.484375,
          "max_score": 10,
          "description": "45/128 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "128/128 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:39:32+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8125,
          "max_score": 10,
          "description": "92/128 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "128/128 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "128/128 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 128 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.655000678902995,
          "max_score": 10,
          "description": "104/128 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:41:39
score_json:
{
  "run_id": "9bc7e618-2bde-4854-b954-d6f84586f26b",
  "timestamp": "2023-03-07T20:41:39Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_aerospike-ee-6.2.0.3_1.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.196762952555065,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/130 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.923076923076923,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:128, total:130"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "130/130 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "130/130 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:41:38.038264Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.153846153846153,
          "max_score": 10,
          "description": "106/130 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.9230769230769234,
          "max_score": 10,
          "description": "92/130 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/130 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.846153846153847,
          "max_score": 10,
          "description": "128/130 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 130 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.538461538461538,
          "max_score": 10,
          "description": "45/130 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/130 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.550643666485948,
          "max_score": 10,
          "description": "104/130 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:43:51
score_json:
{
  "run_id": "04df861e-c4fd-4ef3-b4f5-0763b65bc07e",
  "timestamp": "2023-03-07T20:43:51Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_piwik-3-fpm.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1672180469414375,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.929245283018868,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:209, total:212"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/212 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/212 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 212 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:43:49.049402Z"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.858490566037736,
          "max_score": 10,
          "description": "209/212 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.877379806753268,
          "max_score": 10,
          "description": "123/212 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.90566037735849,
          "max_score": 10,
          "description": "108/212 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.830188679245284,
          "max_score": 10,
          "description": "46/212 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "212/212 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "212/212 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.943396226415095,
          "max_score": 10,
          "description": "126/212 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/212 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:46:02
score_json:
{
  "run_id": "8d3bf67b-8a2a-4963-8695-c826fb1bd95e",
  "timestamp": "2023-03-07T20:46:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_oraclelinux-9.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.397504456327985,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "187/187 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/187 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "187/187 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 187 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/187 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.4438502673796791,
          "max_score": 10,
          "description": "160/187 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "187/187 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.586452762923351,
          "max_score": 10,
          "description": "38/187 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.946524064171122,
          "max_score": 10,
          "description": "186/187 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.973262032085561,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:186, total:187"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "187/187 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:46:00+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/187 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:48:07
score_json:
{
  "run_id": "944a4650-72b4-46d2-87f6-e5a10cd43425",
  "timestamp": "2023-03-07T20:48:07Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_oraclelinux-9.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.144060283687944,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.946808510638297,
          "max_score": 10,
          "description": "187/188 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.893617021276595,
          "max_score": 10,
          "description": "186/188 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/188 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:48:05.988799Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.578014184397163,
          "max_score": 10,
          "description": "38/188 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.973404255319148,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:187, total:188"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.4893617021276595,
          "max_score": 10,
          "description": "160/188 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/188 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 188 relationships "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:50:19
score_json:
{
  "run_id": "4ffff991-59cf-4c86-9a59-af02cda5c825",
  "timestamp": "2023-03-07T20:50:19Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_clojure-temurin-8-tools-deps-jammy.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1115778011882655,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.818965517241379,
          "max_score": 10,
          "description": "135/232 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5,
          "max_score": 10,
          "description": "116/232 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.112068965517241,
          "max_score": 10,
          "description": "67/232 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/232 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "232/232 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.913793103448276,
          "max_score": 10,
          "description": "230/232 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.956896551724138,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:230, total:232"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:50:17.074027Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/232 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "232/232 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 232 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.429831885834268,
          "max_score": 10,
          "description": "132/232 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/232 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:54:57
score_json:
{
  "run_id": "d70f9069-6256-4bea-b944-36c6a10b453f",
  "timestamp": "2023-03-07T20:54:57Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nuxeo-LTS-2017.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.058566859960209,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1214/1214 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9835255354201,
          "max_score": 10,
          "description": "1212/1214 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1214 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:54:52.940156Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.514006062466109,
          "max_score": 10,
          "description": "411/1214 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.108731466227347,
          "max_score": 10,
          "description": "351/1214 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1214/1214 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1219 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1214 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.99176276771005,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1212, total:1214"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.113673805601318,
          "max_score": 10,
          "description": "229/1214 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.4596375617792425,
          "max_score": 10,
          "description": "420/1214 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1214 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:55:00
score_json:
{
  "run_id": "ffc168d0-74d0-478b-ad4c-da01f635f6ac",
  "timestamp": "2023-03-07T20:55:00Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nuxeo-LTS-2017.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.058566859960207,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1214/1214 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.514006062466109,
          "max_score": 10,
          "description": "411/1214 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.113673805601318,
          "max_score": 10,
          "description": "229/1214 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1214/1214 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1214 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.99176276771005,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1212, total:1214"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9835255354201,
          "max_score": 10,
          "description": "1212/1214 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:54:59.5511Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1219 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 3.4596375617792425,
          "max_score": 10,
          "description": "420/1214 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.108731466227347,
          "max_score": 10,
          "description": "351/1214 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1214 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1214 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 20:56:44
score_json:
{
  "run_id": "4af7f632-5057-4f06-b547-2fa4a6ff5ac4",
  "timestamp": "2023-03-07T20:56:44Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_postgres-15.2-alpine3.17.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.918402777777779,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/48 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "48/48 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "48/48 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.166666666666666,
          "max_score": 10,
          "description": "4/48 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.583333333333334,
          "max_score": 10,
          "description": "46/48 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 48 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T20:56:43+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.88888888888889,
          "max_score": 10,
          "description": "43/48 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.833333333333334,
          "max_score": 10,
          "description": "20/48 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.895833333333333,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:47, total:48"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/48 have supplier names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:00:51
score_json:
{
  "run_id": "8427a20b-e1dc-458b-99b0-8df4ece1e529",
  "timestamp": "2023-03-07T21:00:51Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_neo4j-5.5.0-community.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.0696520102863065,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.75,
          "max_score": 10,
          "description": "40/320 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/320 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "320/320 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "320/320 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/320 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.96875,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:318, total:320"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 2.9375,
          "max_score": 10,
          "description": "94/320 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.375,
          "max_score": 10,
          "description": "84/320 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 324 relationships "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.9375,
          "max_score": 10,
          "description": "318/320 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:00:49.301268Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 2.4242902057261326,
          "max_score": 10,
          "description": "92/320 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/320 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:02:56
score_json:
{
  "run_id": "b0e6254f-944c-4c3e-9b75-a423c643a925",
  "timestamp": "2023-03-07T21:02:56Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nginx-1.23-perl.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.427023739133361,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "149/149 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.25859558803633,
          "max_score": 10,
          "description": "116/149 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.154362416107382,
          "max_score": 10,
          "description": "102/149 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.174496644295302,
          "max_score": 10,
          "description": "57/149 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.9865771812080535,
          "max_score": 10,
          "description": "119/149 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "149/149 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/149 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 149 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:02:55+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/149 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.966442953020135,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:148, total:149"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "149/149 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "149/149 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:05:00
score_json:
{
  "run_id": "2d770820-4608-499b-ace2-64ee3f1c9906",
  "timestamp": "2023-03-07T21:05:00Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_nginx-1.23-perl.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.169091444120335,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 150 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/150 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.133333333333333,
          "max_score": 10,
          "description": "58/150 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "150/150 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.966666666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:149, total:150"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.933333333333334,
          "max_score": 10,
          "description": "119/150 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/150 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.2666666666666666,
          "max_score": 10,
          "description": "101/150 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.933333333333334,
          "max_score": 10,
          "description": "149/150 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:04:59.776693Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.1484955490733535,
          "max_score": 10,
          "description": "115/150 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:07:06
score_json:
{
  "run_id": "cdf069f0-e5c9-4088-8be6-d7ed8a4becaf",
  "timestamp": "2023-03-07T21:07:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_owncloud-9.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.1049266507191735,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.816849816849816,
          "max_score": 10,
          "description": "268/273 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:07:04.227658Z"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/273 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.472527472527473,
          "max_score": 10,
          "description": "69/273 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 279 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.131500047350501,
          "max_score": 10,
          "description": "145/273 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.238095238095238,
          "max_score": 10,
          "description": "130/273 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.908424908424908,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:268, total:273"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/273 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "273/273 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 5.531135531135531,
          "max_score": 10,
          "description": "151/273 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:15:18
score_json:
{
  "run_id": "07c0daaa-8c71-40ba-a027-fafd3bba6ea1",
  "timestamp": "2023-03-07T21:15:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_erlang-25.2.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3854322058993604,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "583/583 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6192109777015435,
          "max_score": 10,
          "description": "372/583 components have deprecated licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.615780445969125,
          "max_score": 10,
          "description": "444/583 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 583 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:15:15+00:00"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.88336192109777,
          "max_score": 10,
          "description": "240/583 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.598867102549804,
          "max_score": 10,
          "description": "428/583 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991423670668953,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:582, total:583"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/583 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "583/583 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:15:21
score_json:
{
  "run_id": "fd587069-947d-400f-9f57-8120185b549e",
  "timestamp": "2023-03-07T21:15:21Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_erlang-25.2.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.134250837088767,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 584 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.6301369863013697,
          "max_score": 10,
          "description": "372/584 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.991438356164384,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:583, total:584"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.982876712328768,
          "max_score": 10,
          "description": "583/584 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:15:20.624118Z"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.587414002049302,
          "max_score": 10,
          "description": "428/584 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "584/584 have names"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.602739726027398,
          "max_score": 10,
          "description": "444/584 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/584 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/584 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.89041095890411,
          "max_score": 10,
          "description": "240/584 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:17:26
score_json:
{
  "run_id": "b72d49d5-b54b-46e4-ad47-6c6f8a5706a3",
  "timestamp": "2023-03-07T21:17:26Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_django-1.10-python3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.189341000311745,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 188 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.893617021276595,
          "max_score": 10,
          "description": "186/188 have versions"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.946808510638298,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:186, total:188"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "188/188 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/188 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.2868200062349,
          "max_score": 10,
          "description": "142/188 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.8191489361702127,
          "max_score": 10,
          "description": "135/188 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.712765957446809,
          "max_score": 10,
          "description": "145/188 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/188 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.127659574468085,
          "max_score": 10,
          "description": "54/188 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:17:24.908951Z"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:17:29
score_json:
{
  "run_id": "333de56c-8e8b-49a1-8d53-e8f31bd638ac",
  "timestamp": "2023-03-07T21:17:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_memcached-1.6.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.221784084558348,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:17:28.709433Z"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 1.8627450980392157,
          "max_score": 10,
          "description": "83/102 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.725490196078432,
          "max_score": 10,
          "description": "89/102 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/102 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.950980392156863,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:101, total:102"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.425877769598324,
          "max_score": 10,
          "description": "89/102 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/102 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 102 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.901960784313726,
          "max_score": 10,
          "description": "101/102 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "102/102 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.568627450980392,
          "max_score": 10,
          "description": "35/102 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:19:36
score_json:
{
  "run_id": "248d4714-7b1e-4244-bc2d-a4d2c159a069",
  "timestamp": "2023-03-07T21:19:36Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-gzserver9-bionic.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.377132133118117,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/433 have checksums"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "433/433 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/433 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 433 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.759815242494227,
          "max_score": 10,
          "description": "336/433 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.625783539960495,
          "max_score": 10,
          "description": "323/433 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.394919168591224,
          "max_score": 10,
          "description": "286/433 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "433/433 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.773672055427252,
          "max_score": 10,
          "description": "183/433 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "433/433 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.988452655889145,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:432, total:433"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "433/433 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:19:33+00:00"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:21:42
score_json:
{
  "run_id": "cbed9594-0e7f-416f-a38b-e326c87b6ffd",
  "timestamp": "2023-03-07T21:21:42Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_gazebo-gzserver9-bionic.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.123892551811748,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3.4101382488479266,
          "max_score": 10,
          "description": "286/434 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9884792626728105,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:433, total:434"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.783410138248848,
          "max_score": 10,
          "description": "183/434 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 434 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.576929377248781,
          "max_score": 10,
          "description": "323/434 components with valid license "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/434 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/434 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "434/434 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:21:40.014129Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.976958525345621,
          "max_score": 10,
          "description": "433/434 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "434/434 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.741935483870968,
          "max_score": 10,
          "description": "336/434 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/434 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:23:49
score_json:
{
  "run_id": "6c7b48fa-d3aa-4ac7-8da8-b3063f94e041",
  "timestamp": "2023-03-07T21:23:49Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_httpd-2.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.236319131302113,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.957983193277311,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:118, total:119"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.9411764705882355,
          "max_score": 10,
          "description": "84/119 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/119 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.571428571428571,
          "max_score": 10,
          "description": "102/119 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/119 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "119/119 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.915966386554622,
          "max_score": 10,
          "description": "118/119 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 119 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:23:48.390884Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.953273382344782,
          "max_score": 10,
          "description": "98/119 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.386554621848739,
          "max_score": 10,
          "description": "43/119 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:26:30
score_json:
{
  "run_id": "f59a4b76-51c0-4748-ba15-35c654fc27ba",
  "timestamp": "2023-03-07T21:26:30Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_logstash-8.5.1.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.36020545471401,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/523 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.94263862332696,
          "max_score": 10,
          "description": "520/523 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.97131931166348,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:520, total:523"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "523/523 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 527 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/523 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 8.049713193116634,
          "max_score": 10,
          "description": "102/523 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.8809733390220895,
          "max_score": 10,
          "description": "275/523 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.2657743785850855,
          "max_score": 10,
          "description": "143/523 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "523/523 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:26:27.636957Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.093690248565966,
          "max_score": 10,
          "description": "371/523 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/523 have checksums"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:28:34
score_json:
{
  "run_id": "a4307396-8370-4d0e-a0b0-114c2645d1ee",
  "timestamp": "2023-03-07T21:28:34Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_alpine-3.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.602941176470589,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "17/17 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:28:33.966007Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.823529411764707,
          "max_score": 10,
          "description": "15/17 have licenses"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/17 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.705882352941177,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:16, total:17"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/17 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 8.823529411764707,
          "max_score": 10,
          "description": "15/17 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.294117647058823,
          "max_score": 10,
          "description": "8/17 components have deprecated licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "17/17 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.411764705882353,
          "max_score": 10,
          "description": "16/17 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 17 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/17 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 10,
          "max_score": 10,
          "description": "0/17 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:30:40
score_json:
{
  "run_id": "191c7de4-6114-41a0-b6dc-cc84e108275d",
  "timestamp": "2023-03-07T21:30:40Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_percona-psmdb-5.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.40420918367347,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "196/196 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "196/196 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/196 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.948979591836736,
          "max_score": 10,
          "description": "1/196 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/196 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "196/196 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "196/196 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:30:38+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 196 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.948979591836736,
          "max_score": 10,
          "description": "195/196 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.6811224489795917,
          "max_score": 10,
          "description": "42/196 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.974489795918368,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:195, total:196"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.5306122448979593,
          "max_score": 10,
          "description": "166/196 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:32:46
score_json:
{
  "run_id": "be9945a3-edc7-4b44-9f10-719466b86e72",
  "timestamp": "2023-03-07T21:32:46Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_percona-psmdb-5.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.150888324873097,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.949238578680204,
          "max_score": 10,
          "description": "1/197 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/197 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 1.5736040609137056,
          "max_score": 10,
          "description": "166/197 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "197/197 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 197 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 1.6725888324873097,
          "max_score": 10,
          "description": "42/197 components with valid license "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/197 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "197/197 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.949238578680204,
          "max_score": 10,
          "description": "196/197 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:32:44.586929Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.898477157360405,
          "max_score": 10,
          "description": "195/197 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.974619289340102,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:196, total:197"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/197 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:34:54
score_json:
{
  "run_id": "68877063-fa23-4bcf-a5a5-86f09fa65223",
  "timestamp": "2023-03-07T21:34:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_drupal-php8.2-fpm.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.102340596758706,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/231 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.956709956709957,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:229, total:231"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.0606060606060606,
          "max_score": 10,
          "description": "140/231 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "231/231 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.913419913419913,
          "max_score": 10,
          "description": "229/231 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "231/231 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 231 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:34:52.662003Z"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/231 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/231 have checksums"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.600924489286699,
          "max_score": 10,
          "description": "138/231 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.675324675324675,
          "max_score": 10,
          "description": "123/231 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 6.8398268398268405,
          "max_score": 10,
          "description": "73/231 components have restricted licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:37:02
score_json:
{
  "run_id": "bc256d4d-5d24-478e-841b-ae66bf13105f",
  "timestamp": "2023-03-07T21:37:02Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zts.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.3908967868173985,
      "scores": [
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:37:00+00:00"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970414201183432,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:168, total:169"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "169/169 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 169 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.9585798816568047,
          "max_score": 10,
          "description": "119/169 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.9171597633136095,
          "max_score": 10,
          "description": "69/169 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "169/169 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "169/169 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/169 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "169/169 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/169 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.928994082840237,
          "max_score": 10,
          "description": "134/169 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.042787807353905,
          "max_score": 10,
          "description": "132/169 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:39:07
score_json:
{
  "run_id": "1c44da21-80a1-4b00-a26f-010b93125a1b",
  "timestamp": "2023-03-07T21:39:07Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_php-zts.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.136975976155878,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 3,
          "max_score": 10,
          "description": "119/170 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.9411764705882355,
          "max_score": 10,
          "description": "69/170 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/170 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.941176470588236,
          "max_score": 10,
          "description": "169/170 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:39:05.952729Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/170 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 6.004225405470526,
          "max_score": 10,
          "description": "132/170 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/170 components have primary purpose specified"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.970588235294118,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:169, total:170"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "170/170 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "170/170 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 170 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 7.88235294117647,
          "max_score": 10,
          "description": "134/170 have licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:41:12
score_json:
{
  "run_id": "aaf7c106-0873-4f9f-b3bf-4214544cad6f",
  "timestamp": "2023-03-07T21:41:12Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_joomla-php8.1-fpm-alpine.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.768253968253967,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 105 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.222222222222221,
          "max_score": 10,
          "description": "98/105 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "105/105 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.714285714285714,
          "max_score": 10,
          "description": "102/105 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/105 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.333333333333334,
          "max_score": 10,
          "description": "7/105 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.904761904761905,
          "max_score": 10,
          "description": "104/105 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:41:11.50984Z"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.9523809523809526,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:104, total:105"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/105 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "105/105 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/105 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 7.238095238095238,
          "max_score": 10,
          "description": "29/105 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:45:22
score_json:
{
  "run_id": "a960e81a-ac07-4cc6-87ef-817fc74a24db",
  "timestamp": "2023-03-07T21:45:22Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rails-onbuild.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.201390415483855,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "404/404 have unique ID's"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/404 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 404 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 6.905940594059405,
          "max_score": 10,
          "description": "279/404 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 4.0594059405940595,
          "max_score": 10,
          "description": "240/404 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.950495049504951,
          "max_score": 10,
          "description": "402/404 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:45:19.611201Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 5.488204349281081,
          "max_score": 10,
          "description": "270/404 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.975247524752476,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:402, total:404"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/404 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.648514851485149,
          "max_score": 10,
          "description": "95/404 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "404/404 have names"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/404 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:45:25
score_json:
{
  "run_id": "2da4dcd2-328b-45d4-a1cd-8294df0d95e9",
  "timestamp": "2023-03-07T21:45:25Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_swarm-1.2.9.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 3.25,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/0 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 0,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:0, total:0"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/0 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 0,
          "max_score": 10,
          "description": "doc has 0 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 0,
          "max_score": 10,
          "description": "0/0 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:45:25+00:00"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:45:29
score_json:
{
  "run_id": "175cf0b4-3011-4813-badf-df707056655c",
  "timestamp": "2023-03-07T21:45:29Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_swarm-1.2.9.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 5.5,
      "scores": [
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:45:28.755272Z"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "1/1 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 5,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:1, total:1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 0,
          "max_score": 10,
          "description": "no licenses found"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 0,
          "max_score": 10,
          "description": "0/1 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/1 components have primary purpose specified"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:47:37
score_json:
{
  "run_id": "2fc660eb-d17a-4e77-874d-9d5f4d553e64",
  "timestamp": "2023-03-07T21:47:37Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_thrift-0.11.0.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.547485286249331,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/89 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.943820224719101,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:88, total:89"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.539325842696629,
          "max_score": 10,
          "description": "13/89 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "89/89 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "89/89 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "89/89 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "89/89 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:47:36+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/89 have checksums"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 89 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.089887640449438,
          "max_score": 10,
          "description": "72/89 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.354200107009095,
          "max_score": 10,
          "description": "72/89 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.0224719101123596,
          "max_score": 10,
          "description": "71/89 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:49:43
score_json:
{
  "run_id": "40e8e928-7e32-41ad-a878-55343f67b350",
  "timestamp": "2023-03-07T21:49:43Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_thrift-0.11.0.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.288339438339437,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "90/90 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.266788766788768,
          "max_score": 10,
          "description": "72/90 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.555555555555555,
          "max_score": 10,
          "description": "13/90 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/90 have supplier names"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.944444444444445,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:89, total:90"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/90 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "90/90 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.88888888888889,
          "max_score": 10,
          "description": "89/90 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 90 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:49:42.048674Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/90 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.111111111111111,
          "max_score": 10,
          "description": "71/90 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8,
          "max_score": 10,
          "description": "72/90 have licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:51:48
score_json:
{
  "run_id": "05ca934f-b6c4-4958-b425-a21d40d1675f",
  "timestamp": "2023-03-07T21:51:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_couchbase-enterprise-7.1.3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.245557095376562,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.278688524590164,
          "max_score": 10,
          "description": "101/122 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.213114754098361,
          "max_score": 10,
          "description": "34/122 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "122/122 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.165240268186961,
          "max_score": 10,
          "description": "100/122 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.3770491803278686,
          "max_score": 10,
          "description": "93/122 components have deprecated licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.918032786885245,
          "max_score": 10,
          "description": "121/122 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 122 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:51:47.641624Z"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/122 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/122 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.959016393442623,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:121, total:122"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:53:54
score_json:
{
  "run_id": "28a3fdd8-a2ec-4071-a68a-ca9843688b0c",
  "timestamp": "2023-03-07T21:53:54Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_rethinkdb-2-bullseye-slim.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.439828597258041,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 135 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:53:52+00:00"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 8.814814814814815,
          "max_score": 10,
          "description": "119/135 have licenses"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/135 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 7.01879416738303,
          "max_score": 10,
          "description": "117/135 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 5.851851851851851,
          "max_score": 10,
          "description": "56/135 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "135/135 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "135/135 have versions"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "135/135 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "135/135 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 2.1481481481481484,
          "max_score": 10,
          "description": "106/135 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.962962962962963,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:134, total:135"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/135 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:56:06
score_json:
{
  "run_id": "cf442f55-8571-4620-bc55-af2eb61defba",
  "timestamp": "2023-03-07T21:56:06Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-alpine.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 8.236556898707795,
      "scores": [
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4798 have checksums"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.887453105460608,
          "max_score": 10,
          "description": "4744/4798 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4798 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:55:57+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.880158399333055,
          "max_score": 10,
          "description": "4741/4798 components with valid license "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972905377240517,
          "max_score": 10,
          "description": "13/4798 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.998957899124635,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4797, total:4798"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "4798/4798 have versions"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991663192997082,
          "max_score": 10,
          "description": "4/4798 components have restricted licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4798 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 21:58:18
score_json:
{
  "run_id": "fd800c05-5f4a-4a55-b1e6-553a25bc8ae1",
  "timestamp": "2023-03-07T21:58:18Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_ghost-alpine.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.985885416666667,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 4800 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/4800 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 9.876041666666667,
          "max_score": 10,
          "description": "4741/4800 components with valid license "
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "4800/4800 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 9.883333333333333,
          "max_score": 10,
          "description": "4744/4800 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 9.972916666666666,
          "max_score": 10,
          "description": "13/4800 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 9.991666666666667,
          "max_score": 10,
          "description": "4/4800 components have restricted licenses"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T21:58:10.896442Z"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.995833333333334,
          "max_score": 10,
          "description": "4798/4800 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "4800/4800 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.997916666666667,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:4798, total:4800"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/4800 have supplier names"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/4800 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 22:00:23
score_json:
{
  "run_id": "deb51c94-df69-4c4b-9fe3-dff95ace7f6c",
  "timestamp": "2023-03-07T22:00:23Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_orientdb-3.1.20-tp3.spdx.json",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "json",
      "avg_score": 7.11009247981327,
      "scores": [
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/239 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "239/239 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "239/239 have unique ID's"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.708125746893022,
          "max_score": 10,
          "description": "106/239 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T22:00:22.249302Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/239 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.958158995815899,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:237, total:239"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.075313807531382,
          "max_score": 10,
          "description": "46/239 components have restricted licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.916317991631798,
          "max_score": 10,
          "description": "237/239 have versions"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.518828451882845,
          "max_score": 10,
          "description": "108/239 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/239 components have primary purpose specified"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 239 relationships "
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 6.02510460251046,
          "max_score": 10,
          "description": "95/239 components have deprecated licenses"
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 22:02:41
score_json:
{
  "run_id": "e59eed92-4d26-4382-954e-7d1f3c762552",
  "timestamp": "2023-03-07T22:02:41Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_websphere-liberty-kernel-java11-openj9.cdx.json",
      "spec": "cyclonedx",
      "spec_version": "1.4",
      "file_format": "json",
      "avg_score": 7.371798512409022,
      "scores": [
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.977876106194691,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:225, total:226"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 10,
          "max_score": 10,
          "description": "226/226 components have primary purpose specified"
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 1 authors"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.823008849557522,
          "max_score": 10,
          "description": "109/226 have licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.619469026548672,
          "max_score": 10,
          "description": "99/226 components have deprecated licenses"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 0,
          "max_score": 10,
          "description": "doc has a sharable license free 0 :: of 0"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:1.4 and versions: 1.0,1.1,1.2,1.3,1.4"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "226/226 have names"
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/226 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 7.964601769911504,
          "max_score": 10,
          "description": "46/226 components have restricted licenses"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 10,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:true"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/226 have supplier names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 10,
          "max_score": 10,
          "description": "226/226 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "226/226 have unique ID's"
        },
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: json and version: json,xml"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 226 relationships "
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T22:02:39+00:00"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 4.051014495968021,
          "max_score": 10,
          "description": "108/226 components with valid license "
        }
      ]
    }
  ]
}


updated_at: 2023-03-07 22:04:48
score_json:
{
  "run_id": "e3becee6-bc83-4348-bec4-028fb459d4b6",
  "timestamp": "2023-03-07T22:04:48Z",
  "creation_info": {
    "name": "sbomqs",
    "version": "v0.0.7",
    "scoring_engine_version": "2"
  },
  "files": [
    {
      "file_name": "trivy-0.36.1_websphere-liberty-kernel-java11-openj9.spdx.tv",
      "spec": "spdx",
      "spec_version": "SPDX-2.2",
      "file_format": "tag-value",
      "avg_score": 7.114094926717624,
      "scores": [
        {
          "category": "Structural",
          "feature": "Spec File Format",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported file format for spec: tag-value and version: json,yaml,rdf,tag-value"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have names",
          "score": 10,
          "max_score": 10,
          "description": "228/228 have names"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have uniq ids",
          "score": 10,
          "max_score": 10,
          "description": "228/228 have unique ID's"
        },
        {
          "category": "Quality",
          "feature": "Components have no deprecated licenses",
          "score": 5.614035087719298,
          "max_score": 10,
          "description": "100/228 components have deprecated licenses"
        },
        {
          "category": "Quality",
          "feature": "Components have primary purpose defined",
          "score": 0,
          "max_score": 10,
          "description": "0/228 components have primary purpose specified"
        },
        {
          "category": "Quality",
          "feature": "Components have valid spdx licenses",
          "score": 3.9924248501419397,
          "max_score": 10,
          "description": "109/228 components with valid license "
        },
        {
          "category": "Structural",
          "feature": "SBOM Specification",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is in a supported sbom format of spdx,cyclonedx"
        },
        {
          "category": "Structural",
          "feature": "Spec is parsable",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom is parsable"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has authors",
          "score": 10,
          "max_score": 10,
          "description": "doc has 2 authors"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has creation timestamp",
          "score": 10,
          "max_score": 10,
          "description": "doc has creation timestamp 2023-03-07T22:04:46.041778Z"
        },
        {
          "category": "Semantic",
          "feature": "Doc has all required fields",
          "score": 5,
          "max_score": 10,
          "description": "Doc Fields:true Pkg Fields:false"
        },
        {
          "category": "Semantic",
          "feature": "Components have licenses",
          "score": 4.780701754385965,
          "max_score": 10,
          "description": "109/228 have licenses"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have supplier names",
          "score": 0,
          "max_score": 10,
          "description": "0/228 have supplier names"
        },
        {
          "category": "Sharing",
          "feature": "Doc sharable license",
          "score": 10,
          "max_score": 10,
          "description": "doc has a sharable license free 1 :: of 1"
        },
        {
          "category": "Structural",
          "feature": "Spec Version",
          "score": 10,
          "max_score": 10,
          "description": "provided sbom should be in supported spec version for spec:SPDX-2.2 and versions: SPDX-2.1,SPDX-2.2,SPDX-2.3"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Components have versions",
          "score": 9.912280701754385,
          "max_score": 10,
          "description": "226/228 have versions"
        },
        {
          "category": "NTIA-minimum-elements",
          "feature": "Doc has relationships",
          "score": 10,
          "max_score": 10,
          "description": "doc has 228 relationships "
        },
        {
          "category": "Semantic",
          "feature": "Components have checksums",
          "score": 0,
          "max_score": 10,
          "description": "0/228 have checksums"
        },
        {
          "category": "Quality",
          "feature": "Components have multiple formats of uniq ids",
          "score": 4.956140350877193,
          "max_score": 10,
          "description": "comp with uniq ids: cpe:0, purl:226, total:228"
        },
        {
          "category": "Quality",
          "feature": "Components have no restricted licenses",
          "score": 8.026315789473685,
          "max_score": 10,
          "description": "45/228 components have restricted licenses"
        }
      ]
    }
  ]
}


