Software Component

software_component

The Software Component object describes characteristics of a software component within a software package.

Attributes

Caption	Name	Type	Description
Author	`author`	String	The author(s) who published the software component.
Hash	`hash`	Fingerprint[]	Cryptographic hash to identify the binary instance of a software component.
Software License	`license`	String	The software license applied to this component.
Name	`name`	String	The software component name.
Package URL	`purl`	String	The Package URL (PURL) to identify the software component. This is a URL that uniquely identifies the component, including the component's name, version, and type. The URL is used to locate and retrieve the component's metadata and content.
Raw Data	`raw_data`	String	The raw event/finding data as received from the source.
Record ID	`record_id`	String	Unique identifier for the object
Related Component	`related_component`	String	The package URL (PURL) of the component that this software component has a relationship with.
Relationship	`relationship`	String	The relationship between two software components, normalized to the caption of the `relationship_id` value. In the case of 'Other', it is defined by the source.
Relationship ID	`relationship_id`	Integer	The normalized identifier of the relationship between two software components. `0`: Unknown (`UNKNOWN`) `1`: Depends On (`DEPENDS_ON`) `99`: Other (`OTHER`)
Type	`type`	String	The type of software component, normalized to the caption of the `type_id` value. In the case of 'Other', it is defined by the source.
Type ID	`type_id`	Integer	The type of software component. `1`: Framework (`FRAMEWORK`) `2`: Library (`LIBRARY`) `3`: Operating System (`OPERATING_SYSTEM`) `0`: Unknown (`UNKNOWN`) `99`: Other (`OTHER`)
Unmapped Data	`unmapped`	Object[]	The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
Version	`version`	String	The software component version.

Relationships

Inbound Relationships

These objects and events reference Software Component in their attributes:

Software Bill of Materials

Outbound Relationships

Software Component references the following objects and events in its attributes:

This page describes qdm-1.4.0+ocsf-1.4.0