Software Component

The author(s) who published the software component.

Entity:FINGERPRINT
Cryptographic hash to identify the binary instance of a software component.

The software license applied to this component.

The software component name.

The Package URL (PURL) to identify the software component. This is a URL that uniquely identifies the component, including the component's name, version, and type. The URL is used to locate and retrieve the component's metadata and content.

Group:context
The event data as received from the event source.

Group:primary
Unique identifier for the object

The package URL (PURL) of the component that this software component has a relationship with.

The relationship between two software components, normalized to the caption of the relationship_id value. In the case of 'Other', it is defined by the source.

The normalized identifier of the relationship between two software components.

• 0: Unknown (UNKNOWN)
• 1: Depends On (DEPENDS_ON)
• 99: Other (OTHER)

The type of software component, normalized to the caption of the type_id value. In the case of 'Other', it is defined by the source.

The type of software component.

• 0: Unknown (UNKNOWN)
• 1: Framework (FRAMEWORK)
• 2: Library (LIBRARY)
• 3: Operating System (OPERATING_SYSTEM)
• 99: Other (OTHER)

Data from the source that was not mapped into the schema.

The software component version.