Software Component

software_component

The Software Component object describes characteristics of a software component within a software package.

Attributes

CaptionNameTypeDescription
AuthorauthorString

The author(s) who published the software component.

HashhashFingerprint[]

Entity:FINGERPRINT
Cryptographic hash to identify the binary instance of a software component.

Software LicenselicenseString

The software license applied to this component.

NamenameString

The software component name.

Package URLpurlString

The Package URL (PURL) to identify the software component. This is a URL that uniquely identifies the component, including the component's name, version, and type. The URL is used to locate and retrieve the component's metadata and content.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

RelationshiprelationshipString

The relationship between two software components, normalized to the caption of the relationship_id value. In the case of 'Other', it is defined by the source.

Relationship IDrelationship_idInteger

The normalized identifier of the relationship between two software components.

  • 0: Unknown (UNKNOWN)
  • 1: Depends On (DEPENDS_ON)
  • 99: Other (OTHER)
TypetypeString

The type of software component, normalized to the caption of the type_id value. In the case of 'Other', it is defined by the source.

Type IDtype_idInteger

The type of software component.

  • 0: Unknown (UNKNOWN)
  • 1: Framework (FRAMEWORK)
  • 2: Library (LIBRARY)
  • 3: Operating System (OPERATING_SYSTEM)
  • 99: Other (OTHER)
UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

VersionversionString

The software component version.

Relationships

Software Component shown in context

Inbound Relationships

These objects and events reference Software Component in their attributes:

Outbound Relationships

Software Component references the following objects and events in its attributes:

This page describes ocsf-1.4.0