{ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "name": "test doc", "documentNamespace": "http://www.google.com/sbom/spdx/android", "creationInfo": { "creators": [ "Organization: Google" ], "created": "2023-03-31T22:17:58Z" }, "externalDocumentRefs": [ { "externalDocumentId": "DocumentRef-external_doc_ref", "spdxDocument": "external_doc_uri", "checksum": { "algorithm": "SHA1", "checksumValue": "1234567890" } } ], "documentDescribes": [ "SPDXRef-PRODUCT" ], "packages": [ { "name": "PRODUCT", "SPDXID": "SPDXRef-PRODUCT", "downloadLocation": "NONE", "filesAnalyzed": true, "versionInfo": "build_finger_print", "supplier": "Organization: Google", "licenseDeclared": "NOASSERTION", "packageVerificationCode": { "packageVerificationCodeValue": "123456" }, "hasFiles": [ "SPDXRef-file1", "SPDXRef-file2", "SPDXRef-file3" ] }, { "name": "PLATFORM", "SPDXID": "SPDXRef-PLATFORM", "downloadLocation": "NONE", "filesAnalyzed": false, "versionInfo": "build_finger_print", "supplier": "Organization: Google", "licenseDeclared": "LicenseRef-Android-Apache-2.0" }, { "name": "Prebuilt package1", "SPDXID": "SPDXRef-PREBUILT-package1", "downloadLocation": "NONE", "filesAnalyzed": false, "versionInfo": "build_finger_print", "supplier": "Organization: Google", "licenseDeclared": "LicenseRef-Android-License-1" }, { "name": "Source package1", "SPDXID": "SPDXRef-SOURCE-package1", "downloadLocation": "NONE", "filesAnalyzed": false, "versionInfo": "build_finger_print", "supplier": "Organization: Google", "licenseDeclared": "LicenseRef-Android-License-2 OR LicenseRef-Android-License-3", "externalRefs": [ { "referenceCategory": "SECURITY", "referenceType": "cpe22Type", "referenceLocator": "cpe:/a:jsoncpp_project:jsoncpp:1.9.4" } ] }, { "name": "Upstream package1", "SPDXID": "SPDXRef-UPSTREAM-package1", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "versionInfo": "1.1", "supplier": "Organization: upstream", "licenseDeclared": "LicenseRef-Android-License-2 OR LicenseRef-Android-License-3" } ], "files": [ { "fileName": "/bin/file1", "SPDXID": "SPDXRef-file1", "checksums": [ { "algorithm": "SHA1", "checksumValue": "11111" } ], "licenseConcluded": "LicenseRef-Android-Apache-2.0" }, { "fileName": "/bin/file2", "SPDXID": "SPDXRef-file2", "checksums": [ { "algorithm": "SHA1", "checksumValue": "22222" } ], "licenseConcluded": "LicenseRef-Android-License-1" }, { "fileName": "/bin/file3", "SPDXID": "SPDXRef-file3", "checksums": [ { "algorithm": "SHA1", "checksumValue": "33333" } ], "licenseConcluded": "LicenseRef-Android-License-2 OR LicenseRef-Android-License-3" }, { "fileName": "file4.a", "SPDXID": "SPDXRef-file4", "checksums": [ { "algorithm": "SHA1", "checksumValue": "44444" } ], "licenseConcluded": "NOASSERTION" } ], "relationships": [ { "spdxElementId": "SPDXRef-file1", "relatedSpdxElement": "SPDXRef-PLATFORM", "relationshipType": "GENERATED_FROM" }, { "spdxElementId": "SPDXRef-file2", "relatedSpdxElement": "SPDXRef-PREBUILT-package1", "relationshipType": "GENERATED_FROM" }, { "spdxElementId": "SPDXRef-file3", "relatedSpdxElement": "SPDXRef-SOURCE-package1", "relationshipType": "GENERATED_FROM" }, { "spdxElementId": "SPDXRef-file1", "relatedSpdxElement": "SPDXRef-file4", "relationshipType": "STATIC_LINK" }, { "spdxElementId": "SPDXRef-SOURCE-package1", "relatedSpdxElement": "SPDXRef-UPSTREAM-package1", "relationshipType": "VARIANT_OF" } ], "hasExtractedLicensingInfos": [ { "licenseId": "LicenseRef-Android-Apache-2.0", "name": "License-Apache", "extractedText": "LICENSE_APACHE" }, { "licenseId": "LicenseRef-Android-License-1", "name": "License-1", "extractedText": "LICENSE 1" }, { "licenseId": "LicenseRef-Android-License-2", "name": "License-2", "extractedText": "LICENSE 2" }, { "licenseId": "LicenseRef-Android-License-3", "name": "License-3", "extractedText": "LICENSE 3" } ] }