Files

• Changes
• INSTALL.md
• LICENSE
• MANIFEST
• META.json
• META.yml
• Makefile.PL
• README.md
• lib/SBOM/CycloneDX.pm
• lib/SBOM/CycloneDX/Advisory.pm
• lib/SBOM/CycloneDX/Annotation.pm
• lib/SBOM/CycloneDX/Annotation/Annotator.pm
• lib/SBOM/CycloneDX/Attachment.pm
• lib/SBOM/CycloneDX/Base.pm
• lib/SBOM/CycloneDX/BomRef.pm
• lib/SBOM/CycloneDX/Component.pm
• lib/SBOM/CycloneDX/Component/Commit.pm
• lib/SBOM/CycloneDX/Component/ConfidenceInterval.pm
• lib/SBOM/CycloneDX/Component/Diff.pm
• lib/SBOM/CycloneDX/Component/Graphic.pm
• lib/SBOM/CycloneDX/Component/GraphicsCollection.pm
• lib/SBOM/CycloneDX/Component/ModelCard.pm
• lib/SBOM/CycloneDX/Component/Patch.pm
• lib/SBOM/CycloneDX/Component/Pedigree.pm
• lib/SBOM/CycloneDX/Component/PerformanceMetric.pm
• lib/SBOM/CycloneDX/Component/QuantitativeAnalysis.pm
• lib/SBOM/CycloneDX/Component/SWID.pm
• lib/SBOM/CycloneDX/CryptoProperties.pm
• lib/SBOM/CycloneDX/CryptoProperties/AlgorithmProperties.pm
• lib/SBOM/CycloneDX/CryptoProperties/CertificateProperties.pm
• lib/SBOM/CycloneDX/CryptoProperties/CipherSuite.pm
• lib/SBOM/CycloneDX/CryptoProperties/Ikev2TransformType.pm
• lib/SBOM/CycloneDX/CryptoProperties/ProtocolProperties.pm
• lib/SBOM/CycloneDX/CryptoProperties/RelatedCryptoMaterialProperties.pm
• lib/SBOM/CycloneDX/CryptoProperties/SecuredBy.pm
• lib/SBOM/CycloneDX/DataGovernance.pm
• lib/SBOM/CycloneDX/DataGovernanceResponsibleParty.pm
• lib/SBOM/CycloneDX/Declarations.pm
• lib/SBOM/CycloneDX/Declarations/Affirmation.pm
• lib/SBOM/CycloneDX/Declarations/Assessor.pm
• lib/SBOM/CycloneDX/Declarations/Attestation.pm
• lib/SBOM/CycloneDX/Declarations/Claim.pm
• lib/SBOM/CycloneDX/Declarations/Confidence.pm
• lib/SBOM/CycloneDX/Declarations/Conformance.pm
• lib/SBOM/CycloneDX/Declarations/Contents.pm
• lib/SBOM/CycloneDX/Declarations/Data.pm
• lib/SBOM/CycloneDX/Declarations/Evidence.pm
• lib/SBOM/CycloneDX/Declarations/Map.pm
• lib/SBOM/CycloneDX/Declarations/Signatory.pm
• lib/SBOM/CycloneDX/Declarations/Targets.pm
• lib/SBOM/CycloneDX/Definitions.pm
• lib/SBOM/CycloneDX/Dependency.pm
• lib/SBOM/CycloneDX/Enum.pm
• lib/SBOM/CycloneDX/ExternalReference.pm
• lib/SBOM/CycloneDX/Formulation.pm
• lib/SBOM/CycloneDX/Hash.pm
• lib/SBOM/CycloneDX/IdentifiableAction.pm
• lib/SBOM/CycloneDX/Issue.pm
• lib/SBOM/CycloneDX/Issue/Source.pm
• lib/SBOM/CycloneDX/License.pm
• lib/SBOM/CycloneDX/License/Licensee.pm
• lib/SBOM/CycloneDX/License/Licensing.pm
• lib/SBOM/CycloneDX/License/Licensor.pm
• lib/SBOM/CycloneDX/License/Purchaser.pm
• lib/SBOM/CycloneDX/List.pm
• lib/SBOM/CycloneDX/Metadata.pm
• lib/SBOM/CycloneDX/Metadata/Lifecycle.pm
• lib/SBOM/CycloneDX/Note.pm
• lib/SBOM/CycloneDX/OrganizationalContact.pm
• lib/SBOM/CycloneDX/OrganizationalEntity.pm
• lib/SBOM/CycloneDX/PostalAddress.pm
• lib/SBOM/CycloneDX/Property.pm
• lib/SBOM/CycloneDX/ReleaseNotes.pm
• lib/SBOM/CycloneDX/Schema.pm
• lib/SBOM/CycloneDX/Service.pm
• lib/SBOM/CycloneDX/Standard.pm
• lib/SBOM/CycloneDX/Standard/Level.pm
• lib/SBOM/CycloneDX/Standard/Requirement.pm
• lib/SBOM/CycloneDX/Timestamp.pm
• lib/SBOM/CycloneDX/Tool.pm
• lib/SBOM/CycloneDX/Tools.pm
• lib/SBOM/CycloneDX/Util.pm
• lib/SBOM/CycloneDX/Version.pm
• lib/SBOM/CycloneDX/Vulnerability.pm
• lib/SBOM/CycloneDX/Vulnerability/Affect.pm
• lib/SBOM/CycloneDX/Vulnerability/Analysis.pm
• lib/SBOM/CycloneDX/Vulnerability/Credits.pm
• lib/SBOM/CycloneDX/Vulnerability/ProofOfConcept.pm
• lib/SBOM/CycloneDX/Vulnerability/Rating.pm
• lib/SBOM/CycloneDX/Vulnerability/Reference.pm
• lib/SBOM/CycloneDX/Vulnerability/Source.pm
• lib/SBOM/CycloneDX/schema/bom-1.2-strict.schema.json
• lib/SBOM/CycloneDX/schema/bom-1.2.schema.json
• lib/SBOM/CycloneDX/schema/bom-1.3-strict.schema.json
• lib/SBOM/CycloneDX/schema/bom-1.3.schema.json
• lib/SBOM/CycloneDX/schema/bom-1.4.schema.json
• lib/SBOM/CycloneDX/schema/bom-1.5.schema.json
• lib/SBOM/CycloneDX/schema/bom-1.6.schema.json
• lib/SBOM/CycloneDX/schema/jsf-0.82.schema.json
• lib/SBOM/CycloneDX/schema/spdx.schema.json
• t/00-load.t
• t/50-invalid-empty-component-1.6.t
• t/50-invalid-license-id-1.6.t
• t/50-invalid-license-missing-id-and-name-1.6.t
• t/50-invalid-metadata-license-1.6.t
• t/50-invalid-metadata-timestamp-1.6.t
• t/50-invalid-missing-component-type-1.6.t
• t/50-valid-component-swid-1.6.t
• t/50-valid-license-id-1.6.t
• t/50-valid-metadata-author-1.6.t
• t/50-valid-metadata-license-1.6.t
• t/50-valid-metadata-lifecycle-1.6.t
• t/50-valid-minimal-viable-1.6.t
• t/60-json-schema.t
• t/61-json-schema-test-data.t
• t/lib/Test/CycloneDX.pm
• t/resources/1.2/invalid-bomformat-1.2.json
• t/resources/1.2/invalid-component-ref-1.2.json
• t/resources/1.2/invalid-component-swid-1.2.json
• t/resources/1.2/invalid-component-type-1.2.json
• t/resources/1.2/invalid-dependency-1.2.json
• t/resources/1.2/invalid-hash-alg-1.2.json
• t/resources/1.2/invalid-hash-md5-1.2.json
• t/resources/1.2/invalid-hash-sha1-1.2.json
• t/resources/1.2/invalid-hash-sha256-1.2.json
• t/resources/1.2/invalid-hash-sha512-1.2.json
• t/resources/1.2/invalid-issue-type-1.2.json
• t/resources/1.2/invalid-license-choice-1.2.json
• t/resources/1.2/invalid-license-encoding-1.2.json
• t/resources/1.2/invalid-license-id-1.2.json
• t/resources/1.2/invalid-metadata-timestamp-1.2.json
• t/resources/1.2/invalid-patch-type-1.2.json
• t/resources/1.2/invalid-scope-1.2.json
• t/resources/1.2/invalid-serialnumber-1.2.json
• t/resources/1.2/invalid-service-data-1.2.json
• t/resources/1.2/skip_invalid-empty-component-1.2.json
• t/resources/1.2/skip_invalid-missing-component-type-1.2.json
• t/resources/1.2/valid-assembly-1.2.json
• t/resources/1.2/valid-bom-1.2.json
• t/resources/1.2/valid-component-hashes-1.2.json
• t/resources/1.2/valid-component-ref-1.2.json
• t/resources/1.2/valid-component-swid-1.2.json
• t/resources/1.2/valid-component-swid-full-1.2.json
• t/resources/1.2/valid-component-types-1.2.json
• t/resources/1.2/valid-dependency-1.2.json
• t/resources/1.2/valid-empty-components-1.2.json
• t/resources/1.2/valid-license-expression-1.2.json
• t/resources/1.2/valid-license-id-1.2.json
• t/resources/1.2/valid-license-name-1.2.json
• t/resources/1.2/valid-metadata-author-1.2.json
• t/resources/1.2/valid-metadata-manufacture-1.2.json
• t/resources/1.2/valid-metadata-supplier-1.2.json
• t/resources/1.2/valid-metadata-timestamp-1.2.json
• t/resources/1.2/valid-metadata-tool-1.2.json
• t/resources/1.2/valid-minimal-viable-1.2.json
• t/resources/1.2/valid-patch-1.2.json
• t/resources/1.2/valid-service-1.2.json
• t/resources/1.2/valid-service-empty-objects-1.2.json
• t/resources/1.3/invalid-bomformat-1.3.json
• t/resources/1.3/invalid-component-ref-1.3.json
• t/resources/1.3/invalid-component-swid-1.3.json
• t/resources/1.3/invalid-component-type-1.3.json
• t/resources/1.3/invalid-dependency-1.3.json
• t/resources/1.3/invalid-empty-component-1.3.json
• t/resources/1.3/invalid-hash-alg-1.3.json
• t/resources/1.3/invalid-hash-md5-1.3.json
• t/resources/1.3/invalid-hash-sha1-1.3.json
• t/resources/1.3/invalid-hash-sha256-1.3.json
• t/resources/1.3/invalid-hash-sha512-1.3.json
• t/resources/1.3/invalid-issue-type-1.3.json
• t/resources/1.3/invalid-license-choice-1.3.json
• t/resources/1.3/invalid-license-encoding-1.3.json
• t/resources/1.3/invalid-license-id-1.3.json
• t/resources/1.3/invalid-metadata-license-1.3.json
• t/resources/1.3/invalid-metadata-timestamp-1.3.json
• t/resources/1.3/invalid-missing-component-type-1.3.json
• t/resources/1.3/invalid-patch-type-1.3.json
• t/resources/1.3/invalid-scope-1.3.json
• t/resources/1.3/invalid-serialnumber-1.3.json
• t/resources/1.3/invalid-service-data-1.3.json
• t/resources/1.3/valid-assembly-1.3.json
• t/resources/1.3/valid-bom-1.3.json
• t/resources/1.3/valid-component-hashes-1.3.json
• t/resources/1.3/valid-component-ref-1.3.json
• t/resources/1.3/valid-component-swid-1.3.json
• t/resources/1.3/valid-component-swid-full-1.3.json
• t/resources/1.3/valid-component-types-1.3.json
• t/resources/1.3/valid-compositions-1.3.json
• t/resources/1.3/valid-dependency-1.3.json
• t/resources/1.3/valid-empty-components-1.3.json
• t/resources/1.3/valid-evidence-1.3.json
• t/resources/1.3/valid-external-reference-1.3.json
• t/resources/1.3/valid-license-expression-1.3.json
• t/resources/1.3/valid-license-id-1.3.json
• t/resources/1.3/valid-license-name-1.3.json
• t/resources/1.3/valid-metadata-author-1.3.json
• t/resources/1.3/valid-metadata-license-1.3.json
• t/resources/1.3/valid-metadata-manufacture-1.3.json
• t/resources/1.3/valid-metadata-supplier-1.3.json
• t/resources/1.3/valid-metadata-timestamp-1.3.json
• t/resources/1.3/valid-metadata-tool-1.3.json
• t/resources/1.3/valid-minimal-viable-1.3.json
• t/resources/1.3/valid-patch-1.3.json
• t/resources/1.3/valid-properties-1.3.json
• t/resources/1.3/valid-service-1.3.json
• t/resources/1.3/valid-service-empty-objects-1.3.json
• t/resources/1.4/invalid-bomformat-1.4.json
• t/resources/1.4/invalid-component-ref-1.4.json
• t/resources/1.4/invalid-component-swid-1.4.json
• t/resources/1.4/invalid-component-type-1.4.json
• t/resources/1.4/invalid-dependency-1.4.json
• t/resources/1.4/invalid-empty-component-1.4.json
• t/resources/1.4/invalid-hash-alg-1.4.json
• t/resources/1.4/invalid-hash-md5-1.4.json
• t/resources/1.4/invalid-hash-sha1-1.4.json
• t/resources/1.4/invalid-hash-sha256-1.4.json
• t/resources/1.4/invalid-hash-sha512-1.4.json
• t/resources/1.4/invalid-issue-type-1.4.json
• t/resources/1.4/invalid-license-choice-1.4.json
• t/resources/1.4/invalid-license-encoding-1.4.json
• t/resources/1.4/invalid-license-id-1.4.json
• t/resources/1.4/invalid-metadata-license-1.4.json
• t/resources/1.4/invalid-metadata-timestamp-1.4.json
• t/resources/1.4/invalid-missing-component-type-1.4.json
• t/resources/1.4/invalid-patch-type-1.4.json
• t/resources/1.4/invalid-scope-1.4.json
• t/resources/1.4/invalid-serialnumber-1.4.json
• t/resources/1.4/invalid-service-data-1.4.json
• t/resources/1.4/valid-assembly-1.4.json
• t/resources/1.4/valid-bom-1.4.json
• t/resources/1.4/valid-component-hashes-1.4.json
• t/resources/1.4/valid-component-ref-1.4.json
• t/resources/1.4/valid-component-swid-1.4.json
• t/resources/1.4/valid-component-swid-full-1.4.json
• t/resources/1.4/valid-component-types-1.4.json
• t/resources/1.4/valid-compositions-1.4.json
• t/resources/1.4/valid-dependency-1.4.json
• t/resources/1.4/valid-empty-components-1.4.json
• t/resources/1.4/valid-evidence-1.4.json
• t/resources/1.4/valid-external-reference-1.4.json
• t/resources/1.4/valid-license-expression-1.4.json
• t/resources/1.4/valid-license-id-1.4.json
• t/resources/1.4/valid-license-name-1.4.json
• t/resources/1.4/valid-metadata-author-1.4.json
• t/resources/1.4/valid-metadata-license-1.4.json
• t/resources/1.4/valid-metadata-manufacture-1.4.json
• t/resources/1.4/valid-metadata-supplier-1.4.json
• t/resources/1.4/valid-metadata-timestamp-1.4.json
• t/resources/1.4/valid-metadata-tool-1.4.json
• t/resources/1.4/valid-minimal-viable-1.4.json
• t/resources/1.4/valid-patch-1.4.json
• t/resources/1.4/valid-properties-1.4.json
• t/resources/1.4/valid-release-notes-1.4.json
• t/resources/1.4/valid-service-1.4.json
• t/resources/1.4/valid-service-empty-objects-1.4.json
• t/resources/1.4/valid-signatures-1.4.json
• t/resources/1.4/valid-vulnerability-1.4.json
• t/resources/1.5/invalid-bomformat-1.5.json
• t/resources/1.5/invalid-component-ref-1.5.json
• t/resources/1.5/invalid-component-swid-1.5.json
• t/resources/1.5/invalid-component-type-1.5.json
• t/resources/1.5/invalid-dependency-1.5.json
• t/resources/1.5/invalid-empty-component-1.5.json
• t/resources/1.5/invalid-hash-alg-1.5.json
• t/resources/1.5/invalid-hash-md5-1.5.json
• t/resources/1.5/invalid-hash-sha1-1.5.json
• t/resources/1.5/invalid-hash-sha256-1.5.json
• t/resources/1.5/invalid-hash-sha512-1.5.json
• t/resources/1.5/invalid-issue-type-1.5.json
• t/resources/1.5/invalid-license-choice-1.5.json
• t/resources/1.5/invalid-license-encoding-1.5.json
• t/resources/1.5/invalid-license-id-1.5.json
• t/resources/1.5/invalid-metadata-license-1.5.json
• t/resources/1.5/invalid-metadata-timestamp-1.5.json
• t/resources/1.5/invalid-missing-component-type-1.5.json
• t/resources/1.5/invalid-patch-type-1.5.json
• t/resources/1.5/invalid-scope-1.5.json
• t/resources/1.5/invalid-serialnumber-1.5.json
• t/resources/1.5/invalid-service-data-1.5.json
• t/resources/1.5/valid-annotation-1.5.json
• t/resources/1.5/valid-assembly-1.5.json
• t/resources/1.5/valid-bom-1.5.json
• t/resources/1.5/valid-component-hashes-1.5.json
• t/resources/1.5/valid-component-ref-1.5.json
• t/resources/1.5/valid-component-swid-1.5.json
• t/resources/1.5/valid-component-swid-full-1.5.json
• t/resources/1.5/valid-component-types-1.5.json
• t/resources/1.5/valid-compositions-1.5.json
• t/resources/1.5/valid-dependency-1.5.json
• t/resources/1.5/valid-empty-components-1.5.json
• t/resources/1.5/valid-evidence-1.5.json
• t/resources/1.5/valid-external-reference-1.5.json
• t/resources/1.5/valid-formulation-1.5.json
• t/resources/1.5/valid-license-expression-1.5.json
• t/resources/1.5/valid-license-id-1.5.json
• t/resources/1.5/valid-license-licensing-1.5.json
• t/resources/1.5/valid-license-name-1.5.json
• t/resources/1.5/valid-machine-learning-1.5.json
• t/resources/1.5/valid-metadata-author-1.5.json
• t/resources/1.5/valid-metadata-license-1.5.json
• t/resources/1.5/valid-metadata-lifecycle-1.5.json
• t/resources/1.5/valid-metadata-manufacture-1.5.json
• t/resources/1.5/valid-metadata-supplier-1.5.json
• t/resources/1.5/valid-metadata-timestamp-1.5.json
• t/resources/1.5/valid-metadata-tool-1.5.json
• t/resources/1.5/valid-metadata-tool-deprecated-1.5.json
• t/resources/1.5/valid-minimal-viable-1.5.json
• t/resources/1.5/valid-patch-1.5.json
• t/resources/1.5/valid-properties-1.5.json
• t/resources/1.5/valid-release-notes-1.5.json
• t/resources/1.5/valid-saasbom-1.5.json
• t/resources/1.5/valid-service-1.5.json
• t/resources/1.5/valid-service-empty-objects-1.5.json
• t/resources/1.5/valid-signatures-1.5.json
• t/resources/1.5/valid-vulnerability-1.5.json
• t/resources/1.6/invalid-bomformat-1.6.json
• t/resources/1.6/invalid-component-ref-1.6.json
• t/resources/1.6/invalid-component-swid-1.6.json
• t/resources/1.6/invalid-component-type-1.6.json
• t/resources/1.6/invalid-dependency-1.6.json
• t/resources/1.6/invalid-empty-component-1.6.json
• t/resources/1.6/invalid-hash-alg-1.6.json
• t/resources/1.6/invalid-hash-md5-1.6.json
• t/resources/1.6/invalid-hash-sha1-1.6.json
• t/resources/1.6/invalid-hash-sha256-1.6.json
• t/resources/1.6/invalid-hash-sha512-1.6.json
• t/resources/1.6/invalid-issue-type-1.6.json
• t/resources/1.6/invalid-license-choice-1.6.json
• t/resources/1.6/invalid-license-encoding-1.6.json
• t/resources/1.6/invalid-license-id-1.6.json
• t/resources/1.6/invalid-license-missing-id-and-name-1.6.json
• t/resources/1.6/invalid-metadata-license-1.6.json
• t/resources/1.6/invalid-metadata-timestamp-1.6.json
• t/resources/1.6/invalid-missing-component-type-1.6.json
• t/resources/1.6/invalid-patch-type-1.6.json
• t/resources/1.6/invalid-properties-1.6.json
• t/resources/1.6/invalid-scope-1.6.json
• t/resources/1.6/invalid-serialnumber-1.6.json
• t/resources/1.6/invalid-service-data-1.6.json
• t/resources/1.6/valid-annotation-1.6.json
• t/resources/1.6/valid-assembly-1.6.json
• t/resources/1.6/valid-attestation-1.6.json
• t/resources/1.6/valid-bom-1.6.json
• t/resources/1.6/valid-component-data-1.6.json
• t/resources/1.6/valid-component-hashes-1.6.json
• t/resources/1.6/valid-component-identifiers-1.6.json
• t/resources/1.6/valid-component-ref-1.6.json
• t/resources/1.6/valid-component-swid-1.6.json
• t/resources/1.6/valid-component-swid-full-1.6.json
• t/resources/1.6/valid-component-types-1.6.json
• t/resources/1.6/valid-compositions-1.6.json
• t/resources/1.6/valid-cryptography-full-1.6.json
• t/resources/1.6/valid-cryptography-implementation-1.6.json
• t/resources/1.6/valid-dependency-1.6.json
• t/resources/1.6/valid-empty-components-1.6.json
• t/resources/1.6/valid-evidence-1.6.json
• t/resources/1.6/valid-external-reference-1.6.json
• t/resources/1.6/valid-formulation-1.6.json
• t/resources/1.6/valid-license-expression-1.6.json
• t/resources/1.6/valid-license-id-1.6.json
• t/resources/1.6/valid-license-licensing-1.6.json
• t/resources/1.6/valid-license-name-1.6.json
• t/resources/1.6/valid-machine-learning-1.6.json
• t/resources/1.6/valid-machine-learning-considerations-env-1.6.json
• t/resources/1.6/valid-metadata-author-1.6.json
• t/resources/1.6/valid-metadata-license-1.6.json
• t/resources/1.6/valid-metadata-lifecycle-1.6.json
• t/resources/1.6/valid-metadata-manufacture-1.6.json
• t/resources/1.6/valid-metadata-manufacturer-1.6.json
• t/resources/1.6/valid-metadata-supplier-1.6.json
• t/resources/1.6/valid-metadata-timestamp-1.6.json
• t/resources/1.6/valid-metadata-tool-1.6.json
• t/resources/1.6/valid-metadata-tool-deprecated-1.6.json
• t/resources/1.6/valid-minimal-viable-1.6.json
• t/resources/1.6/valid-patch-1.6.json
• t/resources/1.6/valid-properties-1.6.json
• t/resources/1.6/valid-release-notes-1.6.json
• t/resources/1.6/valid-saasbom-1.6.json
• t/resources/1.6/valid-service-1.6.json
• t/resources/1.6/valid-service-empty-objects-1.6.json
• t/resources/1.6/valid-signatures-1.6.json
• t/resources/1.6/valid-standard-1.6.json
• t/resources/1.6/valid-tags-1.6.json
• t/resources/1.6/valid-vulnerability-1.6.json
• t/resources/README.md
• t/resources/fetch.sh
• xt/kwalitee.t
• xt/manifest.t
• xt/pod-coverage.t
• xt/pod.t