{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT",
"type": "object",
"properties": {
"@context": {
"const": "https://raw.githubusercontent.com/spdx/spdx-3-serialization-prototype-playground/main/jsonld/spdx-3.0-context.json-ld"
}
},
"required": ["@context"],
"oneOf": [
{
"properties": {
"@graph": {
"description": "Top level container for JSON-LD objects",
"type": "array",
"items": {
"$ref": "#/$defs/AnyClass",
"unevaluatedProperties": false
}
}
},
"required": ["@graph"]
},
{ "$ref": "#/$defs/AnyClass" }
],
"unevaluatedProperties": false,
"$defs": {
"CreationInfo": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "CreationInfo" }
]
}
}
},
{ "$ref": "#/$defs/CreationInfo_props" }
]
},
"CreationInfo_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/CreationInfo" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"CreationInfo_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"comment": {
"$ref": "#/$defs/prop_CreationInfo_comment"
},
"created": {
"$ref": "#/$defs/prop_CreationInfo_created"
},
"createdBy": {
"oneOf": [
{
"type": "array",
"minItems": 1,
"items": {
"$ref": "#/$defs/prop_CreationInfo_createdBy"
}
}
]
},
"createdUsing": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_CreationInfo_createdUsing"
}
}
]
},
"specVersion": {
"$ref": "#/$defs/prop_CreationInfo_specVersion"
}
},
"required": [
"created",
"createdBy",
"specVersion"
]
}
]
},
"prop_CreationInfo_comment": {
"type": "string"
},
"prop_CreationInfo_created": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_CreationInfo_createdBy": {
"$ref": "#/$defs/Agent_derived"
},
"prop_CreationInfo_createdUsing": {
"$ref": "#/$defs/Tool_derived"
},
"prop_CreationInfo_specVersion": {
"pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$",
"type": "string"
},
"DictionaryEntry": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "DictionaryEntry" }
]
}
}
},
{ "$ref": "#/$defs/DictionaryEntry_props" }
]
},
"DictionaryEntry_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/DictionaryEntry" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"DictionaryEntry_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"key": {
"$ref": "#/$defs/prop_DictionaryEntry_key"
},
"value": {
"$ref": "#/$defs/prop_DictionaryEntry_value"
}
},
"required": [
"key"
]
}
]
},
"prop_DictionaryEntry_key": {
"type": "string"
},
"prop_DictionaryEntry_value": {
"type": "string"
},
"Element": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Element" }
]
}
}
},
{ "$ref": "#/$defs/Element_props" }
]
},
"Element_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ai_AIPackage" },
{ "$ref": "#/$defs/build_Build" },
{ "$ref": "#/$defs/Agent" },
{ "$ref": "#/$defs/Annotation" },
{ "$ref": "#/$defs/Artifact" },
{ "$ref": "#/$defs/Bom" },
{ "$ref": "#/$defs/Bundle" },
{ "$ref": "#/$defs/ElementCollection" },
{ "$ref": "#/$defs/LifecycleScopedRelationship" },
{ "$ref": "#/$defs/Organization" },
{ "$ref": "#/$defs/Person" },
{ "$ref": "#/$defs/Relationship" },
{ "$ref": "#/$defs/SoftwareAgent" },
{ "$ref": "#/$defs/SpdxDocument" },
{ "$ref": "#/$defs/Tool" },
{ "$ref": "#/$defs/dataset_DatasetPackage" },
{ "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" },
{ "$ref": "#/$defs/expandedlicensing_CustomLicense" },
{ "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" },
{ "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" },
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense" },
{ "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" },
{ "$ref": "#/$defs/expandedlicensing_License" },
{ "$ref": "#/$defs/expandedlicensing_LicenseAddition" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicense" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicenseException" },
{ "$ref": "#/$defs/expandedlicensing_OrLaterOperator" },
{ "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" },
{ "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_Vulnerability" },
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo" },
{ "$ref": "#/$defs/simplelicensing_LicenseExpression" },
{ "$ref": "#/$defs/simplelicensing_SimpleLicensingText" },
{ "$ref": "#/$defs/software_File" },
{ "$ref": "#/$defs/software_Package" },
{ "$ref": "#/$defs/software_Sbom" },
{ "$ref": "#/$defs/software_Snippet" },
{ "$ref": "#/$defs/software_SoftwareArtifact" },
{ "$ref": "#/$defs/Element" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Element_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"comment": {
"$ref": "#/$defs/prop_Element_comment"
},
"creationInfo": {
"$ref": "#/$defs/prop_Element_creationInfo"
},
"description": {
"$ref": "#/$defs/prop_Element_description"
},
"extension": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Element_extension"
}
}
]
},
"externalIdentifier": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Element_externalIdentifier"
}
}
]
},
"externalRef": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Element_externalRef"
}
}
]
},
"name": {
"$ref": "#/$defs/prop_Element_name"
},
"summary": {
"$ref": "#/$defs/prop_Element_summary"
},
"verifiedUsing": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Element_verifiedUsing"
}
}
]
}
},
"required": [
"creationInfo"
]
}
]
},
"prop_Element_comment": {
"type": "string"
},
"prop_Element_creationInfo": {
"$ref": "#/$defs/CreationInfo_derived"
},
"prop_Element_description": {
"type": "string"
},
"prop_Element_extension": {
"$ref": "#/$defs/extension_Extension_derived"
},
"prop_Element_externalIdentifier": {
"$ref": "#/$defs/ExternalIdentifier_derived"
},
"prop_Element_externalRef": {
"$ref": "#/$defs/ExternalRef_derived"
},
"prop_Element_name": {
"type": "string"
},
"prop_Element_summary": {
"type": "string"
},
"prop_Element_verifiedUsing": {
"$ref": "#/$defs/IntegrityMethod_derived"
},
"ElementCollection": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "ElementCollection" }
]
}
}
},
{ "$ref": "#/$defs/ElementCollection_props" }
]
},
"ElementCollection_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Bom" },
{ "$ref": "#/$defs/Bundle" },
{ "$ref": "#/$defs/SpdxDocument" },
{ "$ref": "#/$defs/software_Sbom" },
{ "$ref": "#/$defs/ElementCollection" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"ElementCollection_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"element": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ElementCollection_element"
}
}
]
},
"profileConformance": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ElementCollection_profileConformance"
}
}
]
},
"rootElement": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ElementCollection_rootElement"
}
}
]
}
}
}
]
},
"prop_ElementCollection_element": {
"$ref": "#/$defs/Element_derived"
},
"prop_ElementCollection_profileConformance": {
"enum": [
"ai",
"build",
"core",
"dataset",
"expandedLicensing",
"extension",
"security",
"simpleLicensing",
"software",
"usage"
]
},
"prop_ElementCollection_rootElement": {
"$ref": "#/$defs/Element_derived"
},
"ExternalIdentifier": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "ExternalIdentifier" }
]
}
}
},
{ "$ref": "#/$defs/ExternalIdentifier_props" }
]
},
"ExternalIdentifier_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ExternalIdentifier" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"ExternalIdentifier_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"comment": {
"$ref": "#/$defs/prop_ExternalIdentifier_comment"
},
"externalIdentifierType": {
"$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType"
},
"identifier": {
"$ref": "#/$defs/prop_ExternalIdentifier_identifier"
},
"identifierLocator": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator"
}
}
]
},
"issuingAuthority": {
"$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority"
}
},
"required": [
"externalIdentifierType",
"identifier"
]
}
]
},
"prop_ExternalIdentifier_comment": {
"type": "string"
},
"prop_ExternalIdentifier_externalIdentifierType": {
"enum": [
"cpe22",
"cpe23",
"cve",
"email",
"gitoid",
"other",
"packageUrl",
"securityOther",
"swhid",
"swid",
"urlScheme"
]
},
"prop_ExternalIdentifier_identifier": {
"type": "string"
},
"prop_ExternalIdentifier_identifierLocator": {
"$ref": "#/$defs/anyURI"
},
"prop_ExternalIdentifier_issuingAuthority": {
"type": "string"
},
"ExternalMap": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "ExternalMap" }
]
}
}
},
{ "$ref": "#/$defs/ExternalMap_props" }
]
},
"ExternalMap_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ExternalMap" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"ExternalMap_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"definingArtifact": {
"$ref": "#/$defs/prop_ExternalMap_definingArtifact"
},
"externalSpdxId": {
"$ref": "#/$defs/prop_ExternalMap_externalSpdxId"
},
"locationHint": {
"$ref": "#/$defs/prop_ExternalMap_locationHint"
},
"verifiedUsing": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ExternalMap_verifiedUsing"
}
}
]
}
},
"required": [
"externalSpdxId"
]
}
]
},
"prop_ExternalMap_definingArtifact": {
"$ref": "#/$defs/Artifact_derived"
},
"prop_ExternalMap_externalSpdxId": {
"$ref": "#/$defs/anyURI"
},
"prop_ExternalMap_locationHint": {
"$ref": "#/$defs/anyURI"
},
"prop_ExternalMap_verifiedUsing": {
"$ref": "#/$defs/IntegrityMethod_derived"
},
"ExternalRef": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "ExternalRef" }
]
}
}
},
{ "$ref": "#/$defs/ExternalRef_props" }
]
},
"ExternalRef_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ExternalRef" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"ExternalRef_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"comment": {
"$ref": "#/$defs/prop_ExternalRef_comment"
},
"contentType": {
"$ref": "#/$defs/prop_ExternalRef_contentType"
},
"externalRefType": {
"$ref": "#/$defs/prop_ExternalRef_externalRefType"
},
"locator": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ExternalRef_locator"
}
}
]
}
}
}
]
},
"prop_ExternalRef_comment": {
"type": "string"
},
"prop_ExternalRef_contentType": {
"pattern": "^[^\\/]+\\/[^\\/]+$",
"type": "string"
},
"prop_ExternalRef_externalRefType": {
"enum": [
"altDownloadLocation",
"altWebPage",
"binaryArtifact",
"bower",
"buildMeta",
"buildSystem",
"certificationReport",
"chat",
"componentAnalysisReport",
"documentation",
"dynamicAnalysisReport",
"eolNotice",
"exportControlAssessment",
"funding",
"issueTracker",
"license",
"mailingList",
"mavenCentral",
"metrics",
"npm",
"nuget",
"other",
"privacyAssessment",
"productMetadata",
"purchaseOrder",
"qualityAssessmentReport",
"releaseHistory",
"releaseNotes",
"riskAssessment",
"runtimeAnalysisReport",
"secureSoftwareAttestation",
"securityAdversaryModel",
"securityAdvisory",
"securityFix",
"securityOther",
"securityPenTestReport",
"securityPolicy",
"securityThreatModel",
"socialMedia",
"sourceArtifact",
"staticAnalysisReport",
"support",
"vcs",
"vulnerabilityDisclosureReport",
"vulnerabilityExploitabilityAssessment"
]
},
"prop_ExternalRef_locator": {
"type": "string"
},
"IntegrityMethod": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "IntegrityMethod" }
]
}
}
},
{ "$ref": "#/$defs/IntegrityMethod_props" }
]
},
"IntegrityMethod_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Hash" },
{ "$ref": "#/$defs/PackageVerificationCode" },
{ "$ref": "#/$defs/IntegrityMethod" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"IntegrityMethod_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"comment": {
"$ref": "#/$defs/prop_IntegrityMethod_comment"
}
}
}
]
},
"prop_IntegrityMethod_comment": {
"type": "string"
},
"NamespaceMap": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "NamespaceMap" }
]
}
}
},
{ "$ref": "#/$defs/NamespaceMap_props" }
]
},
"NamespaceMap_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/NamespaceMap" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"NamespaceMap_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"namespace": {
"$ref": "#/$defs/prop_NamespaceMap_namespace"
},
"prefix": {
"$ref": "#/$defs/prop_NamespaceMap_prefix"
}
},
"required": [
"namespace",
"prefix"
]
}
]
},
"prop_NamespaceMap_namespace": {
"$ref": "#/$defs/anyURI"
},
"prop_NamespaceMap_prefix": {
"type": "string"
},
"PackageVerificationCode": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "PackageVerificationCode" }
]
}
}
},
{ "$ref": "#/$defs/PackageVerificationCode_props" }
]
},
"PackageVerificationCode_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/PackageVerificationCode" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"PackageVerificationCode_props": {
"allOf": [
{ "$ref": "#/$defs/IntegrityMethod_props" },
{
"properties": {
"hashValue": {
"$ref": "#/$defs/prop_PackageVerificationCode_hashValue"
},
"packageVerificationCodeExcludedFile": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile"
}
}
]
}
},
"required": [
"hashValue"
]
}
]
},
"prop_PackageVerificationCode_hashValue": {
"type": "string"
},
"prop_PackageVerificationCode_packageVerificationCodeExcludedFile": {
"type": "string"
},
"PositiveIntegerRange": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "PositiveIntegerRange" }
]
}
}
},
{ "$ref": "#/$defs/PositiveIntegerRange_props" }
]
},
"PositiveIntegerRange_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/PositiveIntegerRange" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"PositiveIntegerRange_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
"beginIntegerRange": {
"$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange"
},
"endIntegerRange": {
"$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange"
}
},
"required": [
"beginIntegerRange",
"endIntegerRange"
]
}
]
},
"prop_PositiveIntegerRange_beginIntegerRange": {
"type": "integer",
"minimum": 1
},
"prop_PositiveIntegerRange_endIntegerRange": {
"type": "integer",
"minimum": 1
},
"Relationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Relationship" }
]
}
}
},
{ "$ref": "#/$defs/Relationship_props" }
]
},
"Relationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/LifecycleScopedRelationship" },
{ "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VulnAssessmentRelationship" },
{ "$ref": "#/$defs/Relationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Relationship_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"completeness": {
"$ref": "#/$defs/prop_Relationship_completeness"
},
"endTime": {
"$ref": "#/$defs/prop_Relationship_endTime"
},
"from": {
"$ref": "#/$defs/prop_Relationship_from_"
},
"relationshipType": {
"$ref": "#/$defs/prop_Relationship_relationshipType"
},
"startTime": {
"$ref": "#/$defs/prop_Relationship_startTime"
},
"to": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Relationship_to"
}
}
]
}
},
"required": [
"from",
"relationshipType"
]
}
]
},
"prop_Relationship_completeness": {
"enum": [
"complete",
"incomplete",
"noAssertion"
]
},
"prop_Relationship_endTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_Relationship_from_": {
"$ref": "#/$defs/Element_derived"
},
"prop_Relationship_relationshipType": {
"enum": [
"affects",
"amendedBy",
"ancestorOf",
"availableFrom",
"configures",
"contains",
"coordinatedBy",
"copiedTo",
"delegatedTo",
"dependsOn",
"descendantOf",
"describes",
"doesNotAffect",
"expandsTo",
"exploitCreatedBy",
"fixedBy",
"fixedIn",
"foundBy",
"generates",
"hasAddedFile",
"hasAssessmentFor",
"hasAssociatedVulnerability",
"hasConcludedLicense",
"hasDataFile",
"hasDeclaredLicense",
"hasDeletedFile",
"hasDependencyManifest",
"hasDistributionArtifact",
"hasDocumentation",
"hasDynamicLink",
"hasEvidence",
"hasExample",
"hasHost",
"hasInputs",
"hasMetadata",
"hasOptionalComponent",
"hasOptionalDependency",
"hasOutputs",
"hasPrerequsite",
"hasProvidedDependency",
"hasRequirement",
"hasSpecification",
"hasStaticLink",
"hasTest",
"hasTestCase",
"hasVariant",
"invokedBy",
"modifiedBy",
"other",
"packagedBy",
"patchedBy",
"publishedBy",
"reportedBy",
"republishedBy",
"serializedInArtifact",
"testedOn",
"trainedOn",
"underInvestigationFor",
"usesTool"
]
},
"prop_Relationship_startTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_Relationship_to": {
"$ref": "#/$defs/Element_derived"
},
"SpdxDocument": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "SpdxDocument" }
]
}
}
},
{ "$ref": "#/$defs/SpdxDocument_props" }
]
},
"SpdxDocument_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/SpdxDocument" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"SpdxDocument_props": {
"allOf": [
{ "$ref": "#/$defs/ElementCollection_props" },
{
"properties": {
"dataLicense": {
"$ref": "#/$defs/prop_SpdxDocument_dataLicense"
},
"imports": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_SpdxDocument_imports"
}
}
]
},
"namespaceMap": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_SpdxDocument_namespaceMap"
}
}
]
}
}
}
]
},
"prop_SpdxDocument_dataLicense": {
"$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived"
},
"prop_SpdxDocument_imports": {
"$ref": "#/$defs/ExternalMap_derived"
},
"prop_SpdxDocument_namespaceMap": {
"$ref": "#/$defs/NamespaceMap_derived"
},
"Tool": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Tool" }
]
}
}
},
{ "$ref": "#/$defs/Tool_props" }
]
},
"Tool_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Tool" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Tool_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
}
}
]
},
"expandedlicensing_LicenseAddition": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_LicenseAddition" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }
]
},
"expandedlicensing_LicenseAddition_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicenseException" },
{ "$ref": "#/$defs/expandedlicensing_LicenseAddition" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_LicenseAddition_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"expandedlicensing_additionText": {
"$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText"
},
"expandedlicensing_isDeprecatedAdditionId": {
"$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId"
},
"expandedlicensing_licenseXml": {
"$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml"
},
"expandedlicensing_obsoletedBy": {
"$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy"
},
"expandedlicensing_seeAlso": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso"
}
}
]
},
"expandedlicensing_standardAdditionTemplate": {
"$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate"
}
},
"required": [
"expandedlicensing_additionText"
]
}
]
},
"prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": {
"type": "string"
},
"prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": {
"type": "boolean"
},
"prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": {
"type": "string"
},
"prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": {
"type": "string"
},
"prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": {
"$ref": "#/$defs/anyURI"
},
"prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": {
"type": "string"
},
"expandedlicensing_ListedLicenseException": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_ListedLicenseException" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" }
]
},
"expandedlicensing_ListedLicenseException_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_ListedLicenseException" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_ListedLicenseException_props": {
"allOf": [
{ "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" },
{
"properties": {
"expandedlicensing_deprecatedVersion": {
"$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion"
},
"expandedlicensing_listVersionAdded": {
"$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded"
}
}
}
]
},
"prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": {
"type": "string"
},
"prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": {
"type": "string"
},
"extension_Extension": {
"allOf": [
{
"unevaluatedProperties": true,
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "$ref": "#/$defs/IRI" },
{ "const": "extension_Extension" }
]
}
}
},
{ "$ref": "#/$defs/extension_Extension_props" }
]
},
"extension_Extension_derived": {
"anyOf": [
{ "$ref": "#/$defs/extension_Extension" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"extension_Extension_props": {
"allOf": [
{ "$ref": "#/$defs/SHACLClass" },
{
"properties": {
}
}
]
},
"security_VulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_VulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }
]
},
"security_VulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_VulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/Relationship_props" },
{
"properties": {
"suppliedBy": {
"$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy"
},
"security_assessedElement": {
"$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement"
},
"security_modifiedTime": {
"$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime"
},
"security_publishedTime": {
"$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime"
},
"security_withdrawnTime": {
"$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime"
}
}
}
]
},
"prop_security_VulnAssessmentRelationship_suppliedBy": {
"$ref": "#/$defs/Agent_derived"
},
"prop_security_VulnAssessmentRelationship_security_assessedElement": {
"$ref": "#/$defs/Element_derived"
},
"prop_security_VulnAssessmentRelationship_security_modifiedTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_security_VulnAssessmentRelationship_security_publishedTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_security_VulnAssessmentRelationship_security_withdrawnTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"simplelicensing_AnyLicenseInfo": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "simplelicensing_AnyLicenseInfo" }
]
}
}
},
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }
]
},
"simplelicensing_AnyLicenseInfo_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" },
{ "$ref": "#/$defs/expandedlicensing_CustomLicense" },
{ "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" },
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense" },
{ "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" },
{ "$ref": "#/$defs/expandedlicensing_License" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicense" },
{ "$ref": "#/$defs/expandedlicensing_OrLaterOperator" },
{ "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" },
{ "$ref": "#/$defs/simplelicensing_LicenseExpression" },
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"simplelicensing_AnyLicenseInfo_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
}
}
]
},
"simplelicensing_LicenseExpression": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "simplelicensing_LicenseExpression" }
]
}
}
},
{ "$ref": "#/$defs/simplelicensing_LicenseExpression_props" }
]
},
"simplelicensing_LicenseExpression_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/simplelicensing_LicenseExpression" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"simplelicensing_LicenseExpression_props": {
"allOf": [
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" },
{
"properties": {
"simplelicensing_customIdToUri": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri"
}
}
]
},
"simplelicensing_licenseExpression": {
"$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression"
},
"simplelicensing_licenseListVersion": {
"$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion"
}
},
"required": [
"simplelicensing_licenseExpression"
]
}
]
},
"prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": {
"type": "string"
},
"prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": {
"pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$",
"type": "string"
},
"simplelicensing_SimpleLicensingText": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "simplelicensing_SimpleLicensingText" }
]
}
}
},
{ "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" }
]
},
"simplelicensing_SimpleLicensingText_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/simplelicensing_SimpleLicensingText" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"simplelicensing_SimpleLicensingText_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"simplelicensing_licenseText": {
"$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText"
}
},
"required": [
"simplelicensing_licenseText"
]
}
]
},
"prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": {
"type": "string"
},
"build_Build": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "build_Build" }
]
}
}
},
{ "$ref": "#/$defs/build_Build_props" }
]
},
"build_Build_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/build_Build" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"build_Build_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"build_buildEndTime": {
"$ref": "#/$defs/prop_build_Build_build_buildEndTime"
},
"build_buildId": {
"$ref": "#/$defs/prop_build_Build_build_buildId"
},
"build_buildStartTime": {
"$ref": "#/$defs/prop_build_Build_build_buildStartTime"
},
"build_buildType": {
"$ref": "#/$defs/prop_build_Build_build_buildType"
},
"build_configSourceDigest": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_build_Build_build_configSourceDigest"
}
}
]
},
"build_configSourceEntrypoint": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint"
}
}
]
},
"build_configSourceUri": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_build_Build_build_configSourceUri"
}
}
]
},
"build_environment": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_build_Build_build_environment"
}
}
]
},
"build_parameters": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_build_Build_build_parameters"
}
}
]
}
},
"required": [
"build_buildType"
]
}
]
},
"prop_build_Build_build_buildEndTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_build_Build_build_buildId": {
"type": "string"
},
"prop_build_Build_build_buildStartTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_build_Build_build_buildType": {
"$ref": "#/$defs/anyURI"
},
"prop_build_Build_build_configSourceDigest": {
"$ref": "#/$defs/Hash_derived"
},
"prop_build_Build_build_configSourceEntrypoint": {
"type": "string"
},
"prop_build_Build_build_configSourceUri": {
"$ref": "#/$defs/anyURI"
},
"prop_build_Build_build_environment": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"prop_build_Build_build_parameters": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"Agent": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Agent" }
]
}
}
},
{ "$ref": "#/$defs/Agent_props" }
]
},
"Agent_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Organization" },
{ "$ref": "#/$defs/Person" },
{ "$ref": "#/$defs/SoftwareAgent" },
{ "$ref": "#/$defs/Agent" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Agent_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
}
}
]
},
"Annotation": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Annotation" }
]
}
}
},
{ "$ref": "#/$defs/Annotation_props" }
]
},
"Annotation_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Annotation" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Annotation_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"annotationType": {
"$ref": "#/$defs/prop_Annotation_annotationType"
},
"contentType": {
"$ref": "#/$defs/prop_Annotation_contentType"
},
"statement": {
"$ref": "#/$defs/prop_Annotation_statement"
},
"subject": {
"$ref": "#/$defs/prop_Annotation_subject"
}
},
"required": [
"annotationType",
"subject"
]
}
]
},
"prop_Annotation_annotationType": {
"enum": [
"other",
"review"
]
},
"prop_Annotation_contentType": {
"pattern": "^[^\\/]+\\/[^\\/]+$",
"type": "string"
},
"prop_Annotation_statement": {
"type": "string"
},
"prop_Annotation_subject": {
"$ref": "#/$defs/Element_derived"
},
"Artifact": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Artifact" }
]
}
}
},
{ "$ref": "#/$defs/Artifact_props" }
]
},
"Artifact_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ai_AIPackage" },
{ "$ref": "#/$defs/dataset_DatasetPackage" },
{ "$ref": "#/$defs/security_Vulnerability" },
{ "$ref": "#/$defs/software_File" },
{ "$ref": "#/$defs/software_Package" },
{ "$ref": "#/$defs/software_Snippet" },
{ "$ref": "#/$defs/software_SoftwareArtifact" },
{ "$ref": "#/$defs/Artifact" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Artifact_props": {
"allOf": [
{ "$ref": "#/$defs/Element_props" },
{
"properties": {
"builtTime": {
"$ref": "#/$defs/prop_Artifact_builtTime"
},
"originatedBy": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Artifact_originatedBy"
}
}
]
},
"releaseTime": {
"$ref": "#/$defs/prop_Artifact_releaseTime"
},
"standardName": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Artifact_standardName"
}
}
]
},
"suppliedBy": {
"$ref": "#/$defs/prop_Artifact_suppliedBy"
},
"supportLevel": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_Artifact_supportLevel"
}
}
]
},
"validUntilTime": {
"$ref": "#/$defs/prop_Artifact_validUntilTime"
}
}
}
]
},
"prop_Artifact_builtTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_Artifact_originatedBy": {
"$ref": "#/$defs/Agent_derived"
},
"prop_Artifact_releaseTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_Artifact_standardName": {
"type": "string"
},
"prop_Artifact_suppliedBy": {
"$ref": "#/$defs/Agent_derived"
},
"prop_Artifact_supportLevel": {
"enum": [
"deployed",
"development",
"endOfSupport",
"limitedSupport",
"noAssertion",
"noSupport",
"support"
]
},
"prop_Artifact_validUntilTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"Bundle": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Bundle" }
]
}
}
},
{ "$ref": "#/$defs/Bundle_props" }
]
},
"Bundle_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Bom" },
{ "$ref": "#/$defs/software_Sbom" },
{ "$ref": "#/$defs/Bundle" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Bundle_props": {
"allOf": [
{ "$ref": "#/$defs/ElementCollection_props" },
{
"properties": {
"context": {
"$ref": "#/$defs/prop_Bundle_context"
}
}
}
]
},
"prop_Bundle_context": {
"type": "string"
},
"Hash": {
"allOf": [
{
"properties": {
"@id": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Hash" }
]
}
}
},
{ "$ref": "#/$defs/Hash_props" }
]
},
"Hash_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Hash" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Hash_props": {
"allOf": [
{ "$ref": "#/$defs/IntegrityMethod_props" },
{
"properties": {
"algorithm": {
"$ref": "#/$defs/prop_Hash_algorithm"
},
"hashValue": {
"$ref": "#/$defs/prop_Hash_hashValue"
}
},
"required": [
"algorithm",
"hashValue"
]
}
]
},
"prop_Hash_algorithm": {
"enum": [
"blake2b256",
"blake2b384",
"blake2b512",
"blake3",
"crystalsDilithium",
"crystalsKyber",
"falcon",
"md2",
"md4",
"md5",
"md6",
"other",
"sha1",
"sha224",
"sha256",
"sha384",
"sha3_224",
"sha3_256",
"sha3_384",
"sha3_512",
"sha512"
]
},
"prop_Hash_hashValue": {
"type": "string"
},
"LifecycleScopedRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "LifecycleScopedRelationship" }
]
}
}
},
{ "$ref": "#/$defs/LifecycleScopedRelationship_props" }
]
},
"LifecycleScopedRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/LifecycleScopedRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"LifecycleScopedRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/Relationship_props" },
{
"properties": {
"scope": {
"$ref": "#/$defs/prop_LifecycleScopedRelationship_scope"
}
}
}
]
},
"prop_LifecycleScopedRelationship_scope": {
"enum": [
"build",
"design",
"development",
"other",
"runtime",
"test"
]
},
"Organization": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Organization" }
]
}
}
},
{ "$ref": "#/$defs/Organization_props" }
]
},
"Organization_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Organization" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Organization_props": {
"allOf": [
{ "$ref": "#/$defs/Agent_props" },
{
"properties": {
}
}
]
},
"Person": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Person" }
]
}
}
},
{ "$ref": "#/$defs/Person_props" }
]
},
"Person_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/Person" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Person_props": {
"allOf": [
{ "$ref": "#/$defs/Agent_props" },
{
"properties": {
}
}
]
},
"SoftwareAgent": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "SoftwareAgent" }
]
}
}
},
{ "$ref": "#/$defs/SoftwareAgent_props" }
]
},
"SoftwareAgent_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/SoftwareAgent" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"SoftwareAgent_props": {
"allOf": [
{ "$ref": "#/$defs/Agent_props" },
{
"properties": {
}
}
]
},
"expandedlicensing_ConjunctiveLicenseSet": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_ConjunctiveLicenseSet" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" }
]
},
"expandedlicensing_ConjunctiveLicenseSet_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_ConjunctiveLicenseSet_props": {
"allOf": [
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" },
{
"properties": {
"expandedlicensing_member": {
"oneOf": [
{
"type": "array",
"minItems": 2,
"items": {
"$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member"
}
}
]
}
},
"required": [
"expandedlicensing_member"
]
}
]
},
"prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": {
"$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived"
},
"expandedlicensing_CustomLicenseAddition": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_CustomLicenseAddition" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" }
]
},
"expandedlicensing_CustomLicenseAddition_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_CustomLicenseAddition_props": {
"allOf": [
{ "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" },
{
"properties": {
}
}
]
},
"expandedlicensing_DisjunctiveLicenseSet": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_DisjunctiveLicenseSet" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" }
]
},
"expandedlicensing_DisjunctiveLicenseSet_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_DisjunctiveLicenseSet_props": {
"allOf": [
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" },
{
"properties": {
"expandedlicensing_member": {
"oneOf": [
{
"type": "array",
"minItems": 2,
"items": {
"$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member"
}
}
]
}
},
"required": [
"expandedlicensing_member"
]
}
]
},
"prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": {
"$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived"
},
"expandedlicensing_ExtendableLicense": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_ExtendableLicense" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }
]
},
"expandedlicensing_ExtendableLicense_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_CustomLicense" },
{ "$ref": "#/$defs/expandedlicensing_License" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicense" },
{ "$ref": "#/$defs/expandedlicensing_OrLaterOperator" },
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_ExtendableLicense_props": {
"allOf": [
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" },
{
"properties": {
}
}
]
},
"expandedlicensing_IndividualLicensingInfo": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_IndividualLicensingInfo" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" }
]
},
"expandedlicensing_IndividualLicensingInfo_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_IndividualLicensingInfo_props": {
"allOf": [
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" },
{
"properties": {
}
}
]
},
"expandedlicensing_License": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_License" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_License_props" }
]
},
"expandedlicensing_License_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_CustomLicense" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicense" },
{ "$ref": "#/$defs/expandedlicensing_License" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_License_props": {
"allOf": [
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" },
{
"properties": {
"expandedlicensing_isDeprecatedLicenseId": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId"
},
"expandedlicensing_isFsfLibre": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre"
},
"expandedlicensing_isOsiApproved": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved"
},
"expandedlicensing_licenseXml": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml"
},
"expandedlicensing_obsoletedBy": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy"
},
"expandedlicensing_seeAlso": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso"
}
}
]
},
"expandedlicensing_standardLicenseHeader": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader"
},
"expandedlicensing_standardLicenseTemplate": {
"$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate"
},
"simplelicensing_licenseText": {
"$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText"
}
},
"required": [
"simplelicensing_licenseText"
]
}
]
},
"prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": {
"type": "boolean"
},
"prop_expandedlicensing_License_expandedlicensing_isFsfLibre": {
"type": "boolean"
},
"prop_expandedlicensing_License_expandedlicensing_isOsiApproved": {
"type": "boolean"
},
"prop_expandedlicensing_License_expandedlicensing_licenseXml": {
"type": "string"
},
"prop_expandedlicensing_License_expandedlicensing_obsoletedBy": {
"type": "string"
},
"prop_expandedlicensing_License_expandedlicensing_seeAlso": {
"$ref": "#/$defs/anyURI"
},
"prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": {
"type": "string"
},
"prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": {
"type": "string"
},
"prop_expandedlicensing_License_simplelicensing_licenseText": {
"type": "string"
},
"expandedlicensing_ListedLicense": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_ListedLicense" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_ListedLicense_props" }
]
},
"expandedlicensing_ListedLicense_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_ListedLicense" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_ListedLicense_props": {
"allOf": [
{ "$ref": "#/$defs/expandedlicensing_License_props" },
{
"properties": {
"expandedlicensing_deprecatedVersion": {
"$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion"
},
"expandedlicensing_listVersionAdded": {
"$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded"
}
}
}
]
},
"prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": {
"type": "string"
},
"prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": {
"type": "string"
},
"expandedlicensing_OrLaterOperator": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_OrLaterOperator" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" }
]
},
"expandedlicensing_OrLaterOperator_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_OrLaterOperator" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_OrLaterOperator_props": {
"allOf": [
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" },
{
"properties": {
"expandedlicensing_subjectLicense": {
"$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense"
}
},
"required": [
"expandedlicensing_subjectLicense"
]
}
]
},
"prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": {
"$ref": "#/$defs/expandedlicensing_License_derived"
},
"expandedlicensing_WithAdditionOperator": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_WithAdditionOperator" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" }
]
},
"expandedlicensing_WithAdditionOperator_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_WithAdditionOperator_props": {
"allOf": [
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" },
{
"properties": {
"expandedlicensing_subjectAddition": {
"$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition"
},
"expandedlicensing_subjectExtendableLicense": {
"$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense"
}
},
"required": [
"expandedlicensing_subjectAddition",
"expandedlicensing_subjectExtendableLicense"
]
}
]
},
"prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": {
"$ref": "#/$defs/expandedlicensing_LicenseAddition_derived"
},
"prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": {
"$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived"
},
"security_CvssV2VulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_CvssV2VulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" }
]
},
"security_CvssV2VulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_CvssV2VulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_score": {
"$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score"
},
"security_vectorString": {
"$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString"
}
},
"required": [
"security_score",
"security_vectorString"
]
}
]
},
"prop_security_CvssV2VulnAssessmentRelationship_security_score": {
"oneOf": [
{
"type": "number"
},
{
"type": "string",
"pattern": "^-?[0-9]+(\\.[0-9]*)?$"
}
]
},
"prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": {
"type": "string"
},
"security_CvssV3VulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_CvssV3VulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" }
]
},
"security_CvssV3VulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_CvssV3VulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_score": {
"$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score"
},
"security_severity": {
"$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity"
},
"security_vectorString": {
"$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString"
}
},
"required": [
"security_score",
"security_severity",
"security_vectorString"
]
}
]
},
"prop_security_CvssV3VulnAssessmentRelationship_security_score": {
"oneOf": [
{
"type": "number"
},
{
"type": "string",
"pattern": "^-?[0-9]+(\\.[0-9]*)?$"
}
]
},
"prop_security_CvssV3VulnAssessmentRelationship_security_severity": {
"enum": [
"critical",
"high",
"low",
"medium",
"none"
]
},
"prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": {
"type": "string"
},
"security_CvssV4VulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_CvssV4VulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" }
]
},
"security_CvssV4VulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_CvssV4VulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_score": {
"$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score"
},
"security_severity": {
"$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity"
},
"security_vectorString": {
"$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString"
}
},
"required": [
"security_score",
"security_severity",
"security_vectorString"
]
}
]
},
"prop_security_CvssV4VulnAssessmentRelationship_security_score": {
"oneOf": [
{
"type": "number"
},
{
"type": "string",
"pattern": "^-?[0-9]+(\\.[0-9]*)?$"
}
]
},
"prop_security_CvssV4VulnAssessmentRelationship_security_severity": {
"enum": [
"critical",
"high",
"low",
"medium",
"none"
]
},
"prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": {
"type": "string"
},
"security_EpssVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_EpssVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" }
]
},
"security_EpssVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_EpssVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_percentile": {
"$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile"
},
"security_probability": {
"$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability"
},
"security_publishedTime": {
"$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_publishedTime"
}
},
"required": [
"security_percentile",
"security_probability",
"security_publishedTime"
]
}
]
},
"prop_security_EpssVulnAssessmentRelationship_security_percentile": {
"oneOf": [
{
"type": "number"
},
{
"type": "string",
"pattern": "^-?[0-9]+(\\.[0-9]*)?$"
}
]
},
"prop_security_EpssVulnAssessmentRelationship_security_probability": {
"oneOf": [
{
"type": "number"
},
{
"type": "string",
"pattern": "^-?[0-9]+(\\.[0-9]*)?$"
}
]
},
"prop_security_EpssVulnAssessmentRelationship_security_publishedTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"security_ExploitCatalogVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_ExploitCatalogVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" }
]
},
"security_ExploitCatalogVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_ExploitCatalogVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_catalogType": {
"$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType"
},
"security_exploited": {
"$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited"
},
"security_locator": {
"$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator"
}
},
"required": [
"security_catalogType",
"security_exploited",
"security_locator"
]
}
]
},
"prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": {
"enum": [
"kev",
"other"
]
},
"prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": {
"type": "boolean"
},
"prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": {
"$ref": "#/$defs/anyURI"
},
"security_SsvcVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_SsvcVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" }
]
},
"security_SsvcVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_SsvcVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_decisionType": {
"$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType"
}
},
"required": [
"security_decisionType"
]
}
]
},
"prop_security_SsvcVulnAssessmentRelationship_security_decisionType": {
"enum": [
"act",
"attend",
"track",
"trackStar"
]
},
"security_VexVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_VexVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }
]
},
"security_VexVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_VexVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VulnAssessmentRelationship_props" },
{
"properties": {
"security_statusNotes": {
"$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes"
},
"security_vexVersion": {
"$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion"
}
}
}
]
},
"prop_security_VexVulnAssessmentRelationship_security_statusNotes": {
"type": "string"
},
"prop_security_VexVulnAssessmentRelationship_security_vexVersion": {
"type": "string"
},
"security_Vulnerability": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_Vulnerability" }
]
}
}
},
{ "$ref": "#/$defs/security_Vulnerability_props" }
]
},
"security_Vulnerability_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_Vulnerability" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_Vulnerability_props": {
"allOf": [
{ "$ref": "#/$defs/Artifact_props" },
{
"properties": {
"security_modifiedTime": {
"$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime"
},
"security_publishedTime": {
"$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime"
},
"security_withdrawnTime": {
"$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime"
}
}
}
]
},
"prop_security_Vulnerability_security_modifiedTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_security_Vulnerability_security_publishedTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_security_Vulnerability_security_withdrawnTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"software_SoftwareArtifact": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "software_SoftwareArtifact" }
]
}
}
},
{ "$ref": "#/$defs/software_SoftwareArtifact_props" }
]
},
"software_SoftwareArtifact_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ai_AIPackage" },
{ "$ref": "#/$defs/dataset_DatasetPackage" },
{ "$ref": "#/$defs/software_File" },
{ "$ref": "#/$defs/software_Package" },
{ "$ref": "#/$defs/software_Snippet" },
{ "$ref": "#/$defs/software_SoftwareArtifact" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"software_SoftwareArtifact_props": {
"allOf": [
{ "$ref": "#/$defs/Artifact_props" },
{
"properties": {
"software_additionalPurpose": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose"
}
}
]
},
"software_attributionText": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText"
}
}
]
},
"software_copyrightText": {
"$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText"
},
"software_gitoid": {
"oneOf": [
{
"type": "array",
"maxItems": 2,
"items": {
"$ref": "#/$defs/prop_software_SoftwareArtifact_software_gitoid"
}
}
]
},
"software_primaryPurpose": {
"$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose"
}
}
}
]
},
"prop_software_SoftwareArtifact_software_additionalPurpose": {
"enum": [
"application",
"archive",
"bom",
"configuration",
"container",
"data",
"device",
"deviceDriver",
"diskImage",
"documentation",
"evidence",
"executable",
"file",
"filesystemImage",
"firmware",
"framework",
"install",
"library",
"manifest",
"model",
"module",
"operatingSystem",
"other",
"patch",
"platform",
"requirement",
"source",
"specification",
"test"
]
},
"prop_software_SoftwareArtifact_software_attributionText": {
"type": "string"
},
"prop_software_SoftwareArtifact_software_copyrightText": {
"type": "string"
},
"prop_software_SoftwareArtifact_software_gitoid": {
"$ref": "#/$defs/anyURI"
},
"prop_software_SoftwareArtifact_software_primaryPurpose": {
"enum": [
"application",
"archive",
"bom",
"configuration",
"container",
"data",
"device",
"deviceDriver",
"diskImage",
"documentation",
"evidence",
"executable",
"file",
"filesystemImage",
"firmware",
"framework",
"install",
"library",
"manifest",
"model",
"module",
"operatingSystem",
"other",
"patch",
"platform",
"requirement",
"source",
"specification",
"test"
]
},
"Bom": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "Bom" }
]
}
}
},
{ "$ref": "#/$defs/Bom_props" }
]
},
"Bom_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/software_Sbom" },
{ "$ref": "#/$defs/Bom" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"Bom_props": {
"allOf": [
{ "$ref": "#/$defs/Bundle_props" },
{
"properties": {
}
}
]
},
"expandedlicensing_CustomLicense": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "expandedlicensing_CustomLicense" }
]
}
}
},
{ "$ref": "#/$defs/expandedlicensing_CustomLicense_props" }
]
},
"expandedlicensing_CustomLicense_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/expandedlicensing_CustomLicense" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"expandedlicensing_CustomLicense_props": {
"allOf": [
{ "$ref": "#/$defs/expandedlicensing_License_props" },
{
"properties": {
}
}
]
},
"security_VexAffectedVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_VexAffectedVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" }
]
},
"security_VexAffectedVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_VexAffectedVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" },
{
"properties": {
"security_actionStatement": {
"$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement"
},
"security_actionStatementTime": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime"
}
}
]
}
}
}
]
},
"prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": {
"type": "string"
},
"prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"security_VexFixedVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_VexFixedVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" }
]
},
"security_VexFixedVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_VexFixedVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" },
{
"properties": {
}
}
]
},
"security_VexNotAffectedVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_VexNotAffectedVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" }
]
},
"security_VexNotAffectedVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_VexNotAffectedVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" },
{
"properties": {
"security_impactStatement": {
"$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement"
},
"security_impactStatementTime": {
"$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime"
},
"security_justificationType": {
"$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType"
}
}
}
]
},
"prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": {
"type": "string"
},
"prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": {
"type": "string",
"allOf": [
{
"pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$"
},
{
"pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$"
}
]
},
"prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": {
"enum": [
"componentNotPresent",
"inlineMitigationsAlreadyExist",
"vulnerableCodeCannotBeControlledByAdversary",
"vulnerableCodeNotInExecutePath",
"vulnerableCodeNotPresent"
]
},
"security_VexUnderInvestigationVulnAssessmentRelationship": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "security_VexUnderInvestigationVulnAssessmentRelationship" }
]
}
}
},
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" }
]
},
"security_VexUnderInvestigationVulnAssessmentRelationship_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"security_VexUnderInvestigationVulnAssessmentRelationship_props": {
"allOf": [
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" },
{
"properties": {
}
}
]
},
"software_File": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "software_File" }
]
}
}
},
{ "$ref": "#/$defs/software_File_props" }
]
},
"software_File_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/software_File" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"software_File_props": {
"allOf": [
{ "$ref": "#/$defs/software_SoftwareArtifact_props" },
{
"properties": {
"software_contentType": {
"$ref": "#/$defs/prop_software_File_software_contentType"
},
"software_fileKind": {
"$ref": "#/$defs/prop_software_File_software_fileKind"
}
}
}
]
},
"prop_software_File_software_contentType": {
"pattern": "^[^\\/]+\\/[^\\/]+$",
"type": "string"
},
"prop_software_File_software_fileKind": {
"enum": [
"directory",
"file"
]
},
"software_Package": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "software_Package" }
]
}
}
},
{ "$ref": "#/$defs/software_Package_props" }
]
},
"software_Package_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ai_AIPackage" },
{ "$ref": "#/$defs/dataset_DatasetPackage" },
{ "$ref": "#/$defs/software_Package" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"software_Package_props": {
"allOf": [
{ "$ref": "#/$defs/software_SoftwareArtifact_props" },
{
"properties": {
"software_downloadLocation": {
"$ref": "#/$defs/prop_software_Package_software_downloadLocation"
},
"software_homePage": {
"$ref": "#/$defs/prop_software_Package_software_homePage"
},
"software_packageUrl": {
"$ref": "#/$defs/prop_software_Package_software_packageUrl"
},
"software_packageVersion": {
"$ref": "#/$defs/prop_software_Package_software_packageVersion"
},
"software_sourceInfo": {
"$ref": "#/$defs/prop_software_Package_software_sourceInfo"
}
}
}
]
},
"prop_software_Package_software_downloadLocation": {
"$ref": "#/$defs/anyURI"
},
"prop_software_Package_software_homePage": {
"$ref": "#/$defs/anyURI"
},
"prop_software_Package_software_packageUrl": {
"$ref": "#/$defs/anyURI"
},
"prop_software_Package_software_packageVersion": {
"type": "string"
},
"prop_software_Package_software_sourceInfo": {
"type": "string"
},
"software_Sbom": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "software_Sbom" }
]
}
}
},
{ "$ref": "#/$defs/software_Sbom_props" }
]
},
"software_Sbom_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/software_Sbom" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"software_Sbom_props": {
"allOf": [
{ "$ref": "#/$defs/Bom_props" },
{
"properties": {
"software_sbomType": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_software_Sbom_software_sbomType"
}
}
]
}
}
}
]
},
"prop_software_Sbom_software_sbomType": {
"enum": [
"analyzed",
"build",
"deployed",
"design",
"runtime",
"source"
]
},
"software_Snippet": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "software_Snippet" }
]
}
}
},
{ "$ref": "#/$defs/software_Snippet_props" }
]
},
"software_Snippet_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/software_Snippet" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"software_Snippet_props": {
"allOf": [
{ "$ref": "#/$defs/software_SoftwareArtifact_props" },
{
"properties": {
"software_byteRange": {
"$ref": "#/$defs/prop_software_Snippet_software_byteRange"
},
"software_lineRange": {
"$ref": "#/$defs/prop_software_Snippet_software_lineRange"
},
"software_snippetFromFile": {
"$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile"
}
},
"required": [
"software_snippetFromFile"
]
}
]
},
"prop_software_Snippet_software_byteRange": {
"$ref": "#/$defs/PositiveIntegerRange_derived"
},
"prop_software_Snippet_software_lineRange": {
"$ref": "#/$defs/PositiveIntegerRange_derived"
},
"prop_software_Snippet_software_snippetFromFile": {
"$ref": "#/$defs/software_File_derived"
},
"ai_AIPackage": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "ai_AIPackage" }
]
}
}
},
{ "$ref": "#/$defs/ai_AIPackage_props" }
]
},
"ai_AIPackage_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/ai_AIPackage" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"ai_AIPackage_props": {
"allOf": [
{ "$ref": "#/$defs/software_Package_props" },
{
"properties": {
"ai_autonomyType": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType"
},
"ai_domain": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_domain"
}
}
]
},
"ai_energyConsumption": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption"
},
"ai_hyperparameter": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter"
}
}
]
},
"ai_informationAboutApplication": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication"
},
"ai_informationAboutTraining": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining"
},
"ai_limitation": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_limitation"
},
"ai_metric": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_metric"
}
}
]
},
"ai_metricDecisionThreshold": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold"
}
}
]
},
"ai_modelDataPreprocessing": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing"
}
}
]
},
"ai_modelExplainability": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability"
}
}
]
},
"ai_safetyRiskAssessment": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment"
},
"ai_standardCompliance": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance"
}
}
]
},
"ai_typeOfModel": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel"
}
}
]
},
"ai_useSensitivePersonalInformation": {
"$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation"
}
}
}
]
},
"prop_ai_AIPackage_ai_autonomyType": {
"enum": [
"no",
"noAssertion",
"yes"
]
},
"prop_ai_AIPackage_ai_domain": {
"type": "string"
},
"prop_ai_AIPackage_ai_energyConsumption": {
"type": "string"
},
"prop_ai_AIPackage_ai_hyperparameter": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"prop_ai_AIPackage_ai_informationAboutApplication": {
"type": "string"
},
"prop_ai_AIPackage_ai_informationAboutTraining": {
"type": "string"
},
"prop_ai_AIPackage_ai_limitation": {
"type": "string"
},
"prop_ai_AIPackage_ai_metric": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"prop_ai_AIPackage_ai_metricDecisionThreshold": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"prop_ai_AIPackage_ai_modelDataPreprocessing": {
"type": "string"
},
"prop_ai_AIPackage_ai_modelExplainability": {
"type": "string"
},
"prop_ai_AIPackage_ai_safetyRiskAssessment": {
"enum": [
"high",
"low",
"medium",
"serious"
]
},
"prop_ai_AIPackage_ai_standardCompliance": {
"type": "string"
},
"prop_ai_AIPackage_ai_typeOfModel": {
"type": "string"
},
"prop_ai_AIPackage_ai_useSensitivePersonalInformation": {
"enum": [
"no",
"noAssertion",
"yes"
]
},
"dataset_DatasetPackage": {
"allOf": [
{
"properties": {
"spdxId": { "$ref": "#/$defs/BlankNodeOrIRI" },
"type": {
"oneOf": [
{ "const": "dataset_DatasetPackage" }
]
}
}
},
{ "$ref": "#/$defs/dataset_DatasetPackage_props" }
]
},
"dataset_DatasetPackage_derived": {
"unevaluatedProperties": false,
"anyOf": [
{ "$ref": "#/$defs/dataset_DatasetPackage" },
{ "$ref": "#/$defs/BlankNodeOrIRI" }
]
},
"dataset_DatasetPackage_props": {
"allOf": [
{ "$ref": "#/$defs/software_Package_props" },
{
"properties": {
"dataset_anonymizationMethodUsed": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed"
}
}
]
},
"dataset_confidentialityLevel": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel"
},
"dataset_dataCollectionProcess": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess"
},
"dataset_dataPreprocessing": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing"
}
}
]
},
"dataset_datasetAvailability": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability"
},
"dataset_datasetNoise": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise"
},
"dataset_datasetSize": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize"
},
"dataset_datasetType": {
"oneOf": [
{
"type": "array",
"minItems": 1,
"items": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType"
}
}
]
},
"dataset_datasetUpdateMechanism": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism"
},
"dataset_hasSensitivePersonalInformation": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation"
},
"dataset_intendedUse": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse"
},
"dataset_knownBias": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias"
}
}
]
},
"dataset_sensor": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor"
}
}
]
}
},
"required": [
"dataset_datasetType"
]
}
]
},
"prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_confidentialityLevel": {
"enum": [
"amber",
"clear",
"green",
"red"
]
},
"prop_dataset_DatasetPackage_dataset_dataCollectionProcess": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_dataPreprocessing": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_datasetAvailability": {
"enum": [
"clickthrough",
"directDownload",
"query",
"registration",
"scrapingScript"
]
},
"prop_dataset_DatasetPackage_dataset_datasetNoise": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_datasetSize": {
"type": "integer",
"minimum": 0
},
"prop_dataset_DatasetPackage_dataset_datasetType": {
"enum": [
"audio",
"categorical",
"graph",
"image",
"noAssertion",
"numeric",
"other",
"sensor",
"structured",
"syntactic",
"text",
"timeseries",
"timestamp",
"video"
]
},
"prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": {
"enum": [
"no",
"noAssertion",
"yes"
]
},
"prop_dataset_DatasetPackage_dataset_intendedUse": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_knownBias": {
"type": "string"
},
"prop_dataset_DatasetPackage_dataset_sensor": {
"$ref": "#/$defs/DictionaryEntry_derived"
},
"IRI": {
"type": "string",
"pattern": "^(?!_:).+:.+"
},
"BlankNode": {
"type": "string",
"pattern": "^_:.+"
},
"BlankNodeOrIRI": {
"oneOf": [
{ "$ref": "#/$defs/IRI" },
{ "$ref": "#/$defs/BlankNode" }
]
},
"anyURI": {
"type": "string"
},
"DateTime": {
"type": "string"
},
"MediaType": {
"type": "string"
},
"SemVer": {
"type": "string"
},
"Extension": {
"type": "string"
},
"SHACLClass": {
"type": "object",
"properties": {
"type": {
"oneOf": [
{ "$ref": "#/$defs/IRI" },
{
"enum": [
"CreationInfo",
"DictionaryEntry",
"Element",
"ElementCollection",
"ExternalIdentifier",
"ExternalMap",
"ExternalRef",
"IntegrityMethod",
"NamespaceMap",
"PackageVerificationCode",
"PositiveIntegerRange",
"Relationship",
"SpdxDocument",
"Tool",
"expandedlicensing_LicenseAddition",
"expandedlicensing_ListedLicenseException",
"extension_Extension",
"security_VulnAssessmentRelationship",
"simplelicensing_AnyLicenseInfo",
"simplelicensing_LicenseExpression",
"simplelicensing_SimpleLicensingText",
"build_Build",
"Agent",
"Annotation",
"Artifact",
"Bundle",
"Hash",
"LifecycleScopedRelationship",
"Organization",
"Person",
"SoftwareAgent",
"expandedlicensing_ConjunctiveLicenseSet",
"expandedlicensing_CustomLicenseAddition",
"expandedlicensing_DisjunctiveLicenseSet",
"expandedlicensing_ExtendableLicense",
"expandedlicensing_IndividualLicensingInfo",
"expandedlicensing_License",
"expandedlicensing_ListedLicense",
"expandedlicensing_OrLaterOperator",
"expandedlicensing_WithAdditionOperator",
"security_CvssV2VulnAssessmentRelationship",
"security_CvssV3VulnAssessmentRelationship",
"security_CvssV4VulnAssessmentRelationship",
"security_EpssVulnAssessmentRelationship",
"security_ExploitCatalogVulnAssessmentRelationship",
"security_SsvcVulnAssessmentRelationship",
"security_VexVulnAssessmentRelationship",
"security_Vulnerability",
"software_SoftwareArtifact",
"Bom",
"expandedlicensing_CustomLicense",
"security_VexAffectedVulnAssessmentRelationship",
"security_VexFixedVulnAssessmentRelationship",
"security_VexNotAffectedVulnAssessmentRelationship",
"security_VexUnderInvestigationVulnAssessmentRelationship",
"software_File",
"software_Package",
"software_Sbom",
"software_Snippet",
"ai_AIPackage",
"dataset_DatasetPackage"
]
}
]
}
},
"required": ["type"]
},
"AnyClass": {
"anyOf": [
{ "$ref": "#/$defs/CreationInfo" },
{ "$ref": "#/$defs/DictionaryEntry" },
{ "$ref": "#/$defs/Element" },
{ "$ref": "#/$defs/ElementCollection" },
{ "$ref": "#/$defs/ExternalIdentifier" },
{ "$ref": "#/$defs/ExternalMap" },
{ "$ref": "#/$defs/ExternalRef" },
{ "$ref": "#/$defs/IntegrityMethod" },
{ "$ref": "#/$defs/NamespaceMap" },
{ "$ref": "#/$defs/PackageVerificationCode" },
{ "$ref": "#/$defs/PositiveIntegerRange" },
{ "$ref": "#/$defs/Relationship" },
{ "$ref": "#/$defs/SpdxDocument" },
{ "$ref": "#/$defs/Tool" },
{ "$ref": "#/$defs/expandedlicensing_LicenseAddition" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicenseException" },
{ "$ref": "#/$defs/extension_Extension" },
{ "$ref": "#/$defs/security_VulnAssessmentRelationship" },
{ "$ref": "#/$defs/simplelicensing_AnyLicenseInfo" },
{ "$ref": "#/$defs/simplelicensing_LicenseExpression" },
{ "$ref": "#/$defs/simplelicensing_SimpleLicensingText" },
{ "$ref": "#/$defs/build_Build" },
{ "$ref": "#/$defs/Agent" },
{ "$ref": "#/$defs/Annotation" },
{ "$ref": "#/$defs/Artifact" },
{ "$ref": "#/$defs/Bundle" },
{ "$ref": "#/$defs/Hash" },
{ "$ref": "#/$defs/LifecycleScopedRelationship" },
{ "$ref": "#/$defs/Organization" },
{ "$ref": "#/$defs/Person" },
{ "$ref": "#/$defs/SoftwareAgent" },
{ "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" },
{ "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" },
{ "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" },
{ "$ref": "#/$defs/expandedlicensing_ExtendableLicense" },
{ "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" },
{ "$ref": "#/$defs/expandedlicensing_License" },
{ "$ref": "#/$defs/expandedlicensing_ListedLicense" },
{ "$ref": "#/$defs/expandedlicensing_OrLaterOperator" },
{ "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" },
{ "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_Vulnerability" },
{ "$ref": "#/$defs/software_SoftwareArtifact" },
{ "$ref": "#/$defs/Bom" },
{ "$ref": "#/$defs/expandedlicensing_CustomLicense" },
{ "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" },
{ "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" },
{ "$ref": "#/$defs/software_File" },
{ "$ref": "#/$defs/software_Package" },
{ "$ref": "#/$defs/software_Sbom" },
{ "$ref": "#/$defs/software_Snippet" },
{ "$ref": "#/$defs/ai_AIPackage" },
{ "$ref": "#/$defs/dataset_DatasetPackage" }
]
}
}
}